When it comes to actual harm done to Americans (particularly via their own data), that harm is continually done by US commercial and government interests.

This law isn't a consumer protection law, nor does it attempt to be.

He does take regular phone calls from Putin, the content of which we're not privy to, and he meets with the Iranian government on the down-low.

I think those alone would be grounds to at least take a close look at his access to Twitter data, his censorship choices and any input he has into the algorithms.