I think the presence of international standards like the one potentially being established by GDPR makes outsourcing easier, not harder.
It would make little sense for an Argentine developer to learn the intricacies of Slovenian data protection regulations. It makes a lot more sense for her to learn the intricacies of GDPR (and whatever the US comes up with).