Surely China can just buy all the data that's being collected by US companies and sold. So whats the difference here?