Reading the actual memo in the Tweet, it says that US Companies contracted by the UK were provided access to the data. So, as a made up example, [Massive US-ba

Reading the actual memo in the Tweet, it says that US Companies contracted by the UK were provided access to the data. So, as a made up example, [Massive US-based multinational consulting firm - IBM was listed in the euobserver article)] was contracted to do work for the UK government in this specific area and was provided access to the data (probably after being cleared to do so via a lengthy process that is typical for contracting with governments). Do we have any indication that this data was "copied to the US" in this memo, instead of being worked with in accordance with data security policies to keep it in the EU / UK? That said - if the UK is making illegal copies that's bad, but I wouldn't overreact to the submission title which is not correct.