One question that always seems to be unclear and insufficiently negotiated is reciprocity. What is the US going to offer in return. If they do offer to reciprocate, it actually needs to be delivered before the deal is live. That said, I think it is a shitty deal for these leaky, insecure, bad faith entities to be able to negotiate off to the side with our sensitive personal data like this.
Nothing, it's a hostage situation.