That doesn’t mean China can’t access the data, and we have no guarantees that there aren’t copies of all that data in China.

Yes. What would be a good way to regulate this; still allowing open and fair competition while protecting the privacy of the broad population?

So if the EU forces Facebook to store EU's citizens data in the EU. What would prevent Facebook copying that data to the US?

Or have some American (potentially working for the NSA) remotely accessing EU data?

Under the US CLOUD Act, three letter agencies can compel Facebook to produce user data wherever in the world it is.

When any other country has a law like that, they are obviously the bad guys.

Via a transparent and public legal process.

In China there is no:

1. Public legal process for data requests 2. Now that I think about it, there are no requests for data at all (they don't have to ask, it's just given) 3. Ability for any Chinese company to say no to gov requests

Surely you don't view these circumstances as the same?

Here is the page for the US CLOUD ACT: https://www.justice.gov/dag/cloudact

Where is the similar page detailing how the CCP balances civil rights with security?