That certainly has been how I've seen it play out. Which makes sense as easier to have one rule to fit all and if that rule is based upon the worst case of every countries data laws then you are somewhat more future proofed. After all, not many countries do laws than are demanding their citizens have less privacy - at least in the public sector remit of laws.