The US did basically nothing, but the EU canceled its safe harbor agreement with the US in 2015.

That basically allowed the US to export personal data from the EU, because it was deemed safe. This was needed for Facebook and other services to work smoothly. In 2016 a similar agreement called the Privacy Shield then allowed the export again, but the EU was wary of the US by now and soon canceled the agreement again in 2020 after the CJEU again determined the US to be in breach of it.

Since March 22 we now have the Trans-Atlantic Data Privacy Framework, but I can assure you that it is very likely that the US still doesn't give a fuck about EU privacy and will soon breach this agreement too. It's basically always the commission allowing the US to export EU data until the courts strike it down again.

So it made exporting personal data and spying on EU citizens a little harder.

​

Additionally, https basically became standard instead of the not encrypted http.