Congress is at odds with itself: It has not passed any sort of blanket ban, the ban pertains to use on government devices. It has recognized a problem and provided a partial solution.

Not only that, it's a solution that deals with one single high-profile offender only, it did not create a set of statutes that could be readily applied to other such issues.

I don't understand your assumption that Congress would need to negotiate with other countries' legislatures. We don't need to negotiate with China to make our own laws regarding use of user data. Should that in some way cause friction with other countries, we do have a branch of government already tasked with performing individual nation-level negotiations: It's diplomacy, and we have 13,000 Foreign Service officers stationed around the world to perform the function, with many thousands more in the State Department working to support those efforts.