The entire problem is that the US lacks even the most basic privacy laws.
The thing is, it seems some people want to allow US companies to abuse people's data, but not Chinese companies doing the exact same thing.
That is, the aim of this legislation is purely strategic and has nothing to do with privacy.