The conflicting legal obligations remind me of the Microsoft "safe harbour" case, which is becoming a lot more relevant and still isn't really adequately resolved.
I believe the law mentioned here isn't focused on which organization it is. The law itself basically said you can't export recommendation algorithm. Yes, in the very similar wording as in "you can't export certain GPU chips".