Edward Snowden’s revelations about the PRISM program, the clandestine mass electronic surveillance data mining operation, and the extent of many major US consumer companies’ compliance with National Security Agency requests to access customer personal data has spawned outrage and debate over government and business intrusion into personal privacy. It has also given rise to new opportunities — and challenges — for European companies and their general counsel, as consumers seek services from providers located outside the United States, which presumably keep their personal information out of the reach of the US government.