Whether the NSA cares about it or not doesn’t matter because the data controller can still be sued for collecting the users data if the users opt out. The contr

Whether the NSA cares about it or not doesn’t matter because the data controller can still be sued for collecting the users data if the users opt out. The controller has the motivation in this sense to comply. My point is that if the USA is monitoring citizens from EU, it isn’t through American businesses that intend to comply with GDPR.