But the difference is the jurisdiction of the law.

If an employee here loses data there is recourse. If it happens overseas there is not.