While this is true in principle, it's worth adding the caveat that EU countries have also been pushing for backdoors to encrypted communications in order to expand law enforcement access. Of course while this contradicts the stance on privacy the EU put forward with the GDPR (which sneakily redefined the right to privacy and control of your personal data as an indelible human right btw).

But in case anyone thinks this is a dunk on the EU: this is still not as invasive as the US law enforcement's powers of warrantless surveillance which have repeatedly blown up the EU-US frameworks for data sharing (Privacy Shield and its other iterations, which Mr Schrems seems to have personally made a sport of shooting down faster than they get implemented). It's also not entirely contradictory as the focus here is on protecting the rights of people against corporations while still providing means for the state to violate those rights when necessary (similarly to how the state can violate your right to free movement through incarceration or your right to bodily autonomy by shooting you, neither of which seem to upset the people who'd think this one is a gotcha).

Considering the EU's main function is being a transnational economic region (if you ignore all the fluff about shared values and history and instead follow the definition of "a system's function is what it does"), it's absolutely true that the EU is remarkably restrictive on what corporations can do compared to the US - even before Trump.

EDIT: The two sibling comments prove my point: while EU member states have been pushing for legislation like providing backdoors to encrypted communication, this is neither unique to the EU nor a contradiction and the US already has far wider reaching measures in place.

Consider for example the Switzerland-based CIA and BND (Germany) shell company that distributed backdoored encryption to hostile nations which Germany backed out of when the CIA defended distributing the same technology to friendlies without informing them or their intelligence agencies. Or literally any of the Snowden leaks, which described not only mass surveillance of US citizens but also espionage against US allies (infamously including wiretapping then-chancellor Angela Merkel's mobile phone) to a degree none of the EU member states have ever done anything comparable to - and which those mostly didn't act on because of the importance of maintaining good terms with the US. Or the post-9/11 legislation which not only allowed warrantless surveillance with gag orders (which is why "canaries" became popular in cryptography communities) but even literally killing or abducting and indefinitely incarcerating US citizens without a trial - not to mention torture.

You can criticize the EU for state overreach. You can't do so by using the US for grounds of moral superiority - not even moral equivalence. You can argue about different attitudes to free speech, gun ownership or the right to self-defense (e.g. castle doctrine), sure. All of these are valid grounds for debate. But the US government can (according to its own jurisdiction) legally do so many more things to both its own citizens and non-citizens both within and outside its borders that trying to use it for a libertarian "win" against the EU seems farcical at best.