How are you going to make a law telling companies with offices and that do business internationally that they must hire Americans?

As far as PII, any reasonable company only lets a select few developers see production data anyway. You just don’t let non Americans go near production if you work in an industry where that is necessary