correct me if im wrong but this is not about privacy laws, this is about the US govt being able to force US based companies to share data on non US-citizens.
yes, that's the main point why the US doesn't count as safe harbor and any "contractual agreements" are not worth much as US companies can't "opt. out" of US law.
its because of their national security interest though, which I respect in principle, and the parent post was talking about the companies themselves tracking the users virtually without consent. to me those aspects are very different