If it was his job to downplay the risk's then he absolutely deserved at least this.

Google or any other US company will not be defending your's or anyone's else's data. It's not only that they doesn't want to(which they dont) but they simply can't.

You must comply with the law and you do not want to currently piss off anyone's at the top.