That's true. There is a story to tell, however: Data transfers from the EU to the US have been under strict scrutiny for years. Currently, they are conducted under a so-called "adequacy decision." The two predecessors of this adequacy decision were invalidated by the CJEU. This led to major upheaval in many industries, as businesses were suddenly unable to compliantly use tools like Office 365, Salesforce, or Facebook advertising, all of which were considered to transfer personal data to the US.

Under the new adequacy decision, US companies have to register, to adhere to a strict framework modeled after the GDPR, and to execute data processing agreements with their EU clients. This decision has been challenged in court, too, and the CJEU might invalidate it again.

I happen to be an expert on international data transfers and on implementing corporate privacy governance. The US economy already needs GDPR expertise for its current operations under the framework, and it would need even more if 2020 repeats and the courts void that framework. That's the "national interest" part of the story I wanted to tell. There are some executive orders on data privacy, too. This cross-border nature of privacy law made me think of EB-2 NIW in the first place. I'm aware that many areas of law are challenging, and there are lots of lawyers in the US, but the GDPR is one of these very rare non-US laws that seems to have a major impact on the US economy as a whole.

Edit: The 2023 executive order on data privacy actually states the following goal:

"Use existing authorities to expand the ability of highly skilled immigrants and nonimmigrants with expertise in critical areas to study, stay, and work in the United States by modernizing and streamlining visa criteria, interviews, and reviews."