There's no single law overriding, because the USA has no privacy protection at all. It only cares about military and cooperate protection. The USA is acting under military powers against foreigners and under martial law against their own civilians (NDAA, Patroit Act, USA Freedom Act, FAA, ...) when they see fit. It's no challenge at all to show Europe how your system works, because we know that you don't care at all about privacy and give all illegally snooped private information to various US agencies acting without any oversight and sell it to the highest bidders by pointing to inacceptable terms of services which in many points violate any civil law. Under EU law unlawful civil terms of services are void. Of course there can be no overrides. When the US at some time will come back to international standards of the common and civil law and the democratic society, such trade agreements will not be needed anymore. But calling it "Safe Harbor" now is a fabrication.
“The proposal foresees no legally binding improvements. Instead, it merely relies on a declaration by the US authorities on their interpretation of the legal situation regarding surveillance by US secret services, as well as the creation of an independent but powerless Ombudsman, who would assess citizens' complaints,” Albrecht said.
Germany’s federal and regional data-protection authorities said 2015 they wouldn’t approve any new transfers of data to the U.S. — even for transfers based on arrangements different from the trans-Atlantic data-transfer pact knocked down by the European Union’s highest court.
That said, I think the Times style looks terrible in most typefaces, and that such extraneous punctuation should just be eliminated. Ms Jones, a CPA who worked at the FBI in the 90s, agrees with me.
EDIT: maybe for some import goods ?
