As a US business, they are required by law to share any data they have with the us governement. They were also part of PRISM so they have 0 credibility about protecting EU citizens' data.
What law are you referring to? I'm pretty sure no such law exists. The US government can't request any data as they please. EU governments can and do request data as well since US companies operate in EU countries.