Yup, a pretty backwards law. Solution is to use a wiped device and only have servers in the US to store info.