Because the data is going to a foreign country instead of staying in America, where it's subject to American over site (see Schrems II in the EU).