The difference is that US companies at least have some level of accountability. When the actual government runs your models/data/site, there is none.

US companies are mainly accountable to their balance sheets. If government wants your personal data, they can easily buy it.

https://globalcybersecurityreport.com/policy-governance/2023...