The EU member states are responsible for protecting various rights of their citizens and they can't do that if the private data is placed in a uncooperating jurisdiction.