It seems to mean that companies can get around all your privacy protections, such as GDPR, simply by hosting their servers in the USA. Then they can mine your data all they like and you have no recourse. I guess the right people were paid/threatened, because this undermines a lot of the EU's work on data protection over the past several years.

stealing our data. like in the US sadly . its like a bypass for google and facebook if i get it corectly.

As a EU (plus UK) citizen, you have a bunch of pretty neat rights over your data due to GDPR, and unlike most other laws, violating GDPR can really hurt the perpetrator (since they get fined as % of revenue, not % of profit)

GDPR also allows the transfer of data to other countries, but only if the receiving country has privacy protection laws equivalent to GDPR, which excludes pretty much anywhere outside the EU/Eurozone

So, they basically get to ignore GDPR altogether, with no consequences, if this isn't shut down by the EU right fucking now

The results include, but are not limited to:

-Storing cookies in your computer without your explicit consent (user tracking)

-Targetted ads that you can't opt out of

-Foreign actors having access to your data

-No way to request the deletion of your data, alongside the erosion of most rights about them

-probably many more