From a UK perspective
It's unlikely that a UK data controller will obtain consent from a non-UK data controller as consent has to be obtained fairly. As such, if any UK companies are buying personal data from the US then they'll unlikely have the consent required to target the individuals with direct marketing. And of course, when obtaining information indirectly for direct marketing, they'll need to provide you with a fair processing notice first.
My policy now is to claim £750 in compensation from any UK data controller that fails to process my information fairly or claim compensation in court. Some settle while some opt for court.
Biting the hand that feeds IT
