[br1brown]

to this I would like to add that here in italy we also have "MonitoraPA" (monitoring public administrations) This is an observatory run by volunteers that takes care of verifying data transfers of users (i.e., citizens accessing Italian PA services) to foreign companies (typically USA). The latter, by virtue of more favorable legislation in their home states, can do whatever they want with such data and are required to hand it over to the government upon simple request. In this way, Italian citizens lose any guarantees enshrined in our country's legislation, starting with the constitution itself, as well as the GDPR