So in other words, the US would have to change (or limit the scope of) its laws? Then yes. But the implication was that the EU could do something to make such

So in other words, the US would have to change (or limit the scope of) its laws? Then yes. But the implication was that the EU could do something to make such a treaty work and other than repeal and replace GDPR I don't see any way as long as the US insists on playing secret police when it comes to foreign data subjects.