> If that is true then that means there is no data privacy protection in the US?

There may be some very specific data privacy laws (like two-party consent states), but yeah, you should assume no data privacy protection in the US.