The problem with a totally separate government having your data, is that they are not bound by your government's laws. What prevents a foreign government from s

The problem with a totally separate government having your data, is that they are not bound by your government's laws. What prevents a foreign government from selling your data to private entities, which then resell these data to criminals? Or, a more likely scenario, said foreign government isn't as careful about vetting who has access to that kind of data (because they don't have the GDPR there), leading to criminals from your own country getting access to it? That is: even if you never plan to visit the remote country in question, the data can come back to your country (or a third country you might want to visit). And it might not even get there intact: what happens if your fingerprints get mislabeled as someone else's?