Note that the US is absolutely capable of passing a data protection law at any time. I wouldn’t hold my breath, though.