US is not the culprit here. Any government can pass a law that allows them to scan data in their country.