Well, the U.S. has its own history of people who shoot at census takers, and so on. From a legal perspective, the EU and member state implementing laws are: (1) more protective of the individual over the corporation than US laws, and (2) fairly onerous and expensive for companies to comply with. In fact, compliance is a kind of red herring, since many of the data protection rules in place are ambiguous or nonsensical. Personal privacy is basically a global policy experiment at the moment.