When it comes to actual harm done to Americans (particularly via their own data), that harm is continually done by US commercial and government interests.

This law isn't a consumer protection law, nor does it attempt to be.