> There has to be more to it than that.

Hehe, that's what I thought about your posting when I finally managed to find that meager sentence between the copious quotes. ;-)

I think the mentioned case is quite interesting because on the whole it seems that privacy standards are rather lax in the US (European privacy laws rate the US basically as third-world/unsafe and special vetting is required for exchanging sensitive data with partners in the US, aka the 'safe haven' rule).