U.S. businesses, in complying with domestic legal obligations to turn over EU nationals??? data to the NSA or other government agencies, would be in violation of EU law regardless of whether or not they complied with the privacy principles set out in the Framework.