The NSA / US govt are the ones we should be pissed at here, their data acquisition is what tanked Privacy Shield, that US companies doing business abroad depend

The NSA / US govt are the ones we should be pissed at here, their data acquisition is what tanked Privacy Shield, that US companies doing business abroad depended on. The way these systems typically work is that a US company builds its infra in the US, and gets economy of scale from shared infra, especially true for companies that run their own data centers. (Look at the map of Meta DCs). The alternative is that you need to stand up a full copy of your infra (per what? In the limit, per country?) and that’s substantially more expensive, not to mention technically challenging. So the answer is simply that it was built the easy way, based on the assumption that the Privacy Shield treaty was sound. Also, what does that even mean for an app like Meta? They are a graph. Where do the edges that span jurisdictions live? If a US user likes an EU user, is the “like” edge stored in the EU? There are reasonable answers to this sort of question, and the reasonable answers may overlap with how the regulators wrote the laws, or they may be mutually inconsistent with how other regulators wrote the laws. It seems quite likely that the end state is as you describe, but I think around here of all places there should be a deep understanding of how hard it is to split your system like this.