The EU is perfectly capable of violating user privacy without the involvement of foreign tech.