Why doesn't USA pass a law that enforces data on US citizens to be stored in the US, like GDPR does in EU?