They did. Divisions H and I of HR 815 of the 118th Congress make it illegal to collect, broker, lease, trade, or sell US Citizen's personally identifying data to an adversarial nation which is defined in Article 10 as China, Russia, Iran, or North Korea.
You're complaining about the law and you literally have no idea what that law says?