Re: EU not interested in protecting the people from their gov'ts....
@AC: Who the data is about, is not really relevant, except in that it establishes who has standing to sue. An American citizen who lives in France and provides his data to a company in Belgium? - their data is "protected", for whatever that's worth, by the European directive, and the person's citizenship is irrelevant. And anyone who lives in the US is subject to - and protected by - US law, regardless of citizenship. (The 14th amendment makes it unconstitutional to make special protections only apply to "citizens".)
The issue is that if you give consent for anyone in the US to access your data legally - then that person can be compelled under US law to access that data without your consent, e.g. to pass it on to the NSA, regardless of any local law elsewhere that says they can't. That's the case Microsoft is fighting right now.
As for who is "entitled to privacy" - that's easy, no-one. Or everyone. It depends on what you mean by "entitled". And "privacy", come to think of it. To me, "privacy" means that my personal shit is shared only with my knowledge and consent. When I do stuff online, I know spooks can track it, and by the act of doing it online I could be said to "consent" to that, and therefore my privacy is not really being violated. QED.
And what I'm "entitled" to is what the law, as interpreted by the courts, says it is, no more and no less. My entitlement, and yours and everyone else in the worlds' - changed with this ruling. That's why it's a big deal.