I think this was disused a few days ago in a similar HN comment thread. Turns out, the US has way more data-tapping anti-privacy laws than the EU - only that the US more or less secretly adopted them and forbids any company from telling their end-users.
Whereas you hear more about "data regulation-attempts" in the EU because it actually still has very strong privacy-rules and when trying to alter them there is a real public debate and not a hush-hush secret commission that gives security agencies access to all user data without public notification.
Here is the related discussion: https://news.ycombinator.com/item?id=46509019#46510983
It is pointless trying to explain to corporate company man who just repeat the narrative of their bosses.