> What the EU has done is far from perfect but it bans the worst practices

I've always found the EU and India’s data regulations somewhat superficial. Sure, it’s a start that my data is stored in the EU, but how does that really help if the CCP can just call a ByteDance executive and ask them to run a SQL query on demand?

I am not saying those laws shouldn't exist, but don't protect against the threat model of other side being China