It is beyond even that. Even if you get legislation making illegal for the NSA to spy outside the US you also have to pass a law saying they can't receive data from the GHCQ who were the ones who tapped Google and Yahoo in Europe and then shared the data with the US.