"Data privacy is not highly legislated or regulated in the U.S.. Although partial regulations exist, there is no all-encompassing law regulating the acquisition, storage, or use of personal data in the U.S. In general terms, in the U.S., whoever can be troubled to key in the data, is deemed to own the right to store and use it, even if the data were collected without permission."
This is not about NSA.
Private companies gather more and more data about us without any control (especially the US-ones), so it's good that EU tries to regulate that.