It could actually result in people being sued in the US as well. There are many standards that require protection of user data (like PCI and HIPPA) that could b

It could actually result in people being sued in the US as well. There are many standards that require protection of user data (like PCI and HIPPA) that could be compromised by the NSA. Yet there is no simple defense since you can't point a finger at a secretive government agency. If you are legally required to demonstrate the data is protected, yet it appears to be available to any random contractor of the NSA, it might make it impossible to provide that guarantee.