I don't know. That sounds right in theory.. but in practice, would a country that prosecutes people on ethnical/cultural grounds even consider allowing companies to ignore their data requests?

History tells us no. History also tells us that tech companies often don't give a shit. Perhaps a highly visible company like Google or Twitter might, but a little visible company like IBM or Cisco? I wouldn't bet on it.