"Stanford Center for Internet and Society director of civil liberties, Jennifer Granick, told ZDNet that American data could be swept up by the NSA, and many of the decisions on which US-based data goes international is made by service providers themselves. "
They have off shore data centers for latency/redundancy purposes and so US data might travel internationally to be stored there," she said.
"There are some rules about how they can use both American and non-US person data, but the rules are protocols internal to the Executive Branch or even the agency, and they are very, very liberal.""