I hate to break it to you, but it's the US that owns most of the tech companies that collects a huge chunk of personal information of people from all over the world, let alone that of US citizens, not China, the UK or Russia. All the US government has to do is to go to that US company and cite national security and force them to sign the NDA.
The data that those US companies have is too tempting not to be analyzed and experimented on for those with power. And as they say, absolute power corrupts absolutely.