They haven’t enforced it yet (for the banks, for non-compliant Americans, they have). But they’ve signed treaties with many governments to allow this, and they threaten foreign banks with fines related to any US dealings.