But that assumes uncommon ground over a common one -- just because product X is built in country Y does not mean a country or region shares those values by defa

But that assumes uncommon ground over a common one -- just because product X is built in country Y does not mean a country or region shares those values by default. A shared ruleset on the other hand ('privacy by default'), might be shared more fully.