As a contractor outside of EU/USA I stuggle a lot to handle those regulations for PII(personal identify information). We have no rights to transfer even a single bit of PII out of EU/USA networks.
So I just don't understand, why it's such a news after all.