According to court documents, the UK commissioner doesn’t have the authority or jurisdiction to cite or fine the “foreign” company for GDPR infractions.