There were reports of possible spying on Merkel but considering Germany then sought entrance into the five eyes (a process currently underway) it seems there is likely a lot more than meets the eye there

If the issue in contention is US companies being unable to protect against privacy intrusions from the US government, then EU companies being equally unable to protect against privacy intrusions from the US government sounds entirely relevant to me...