what about American companies collecting EU user data in addition to US