How does the EU approach to cybersecurity and data privacy differ from the US? Overall, how much convergence, and divergence, is there between the major cyber powers? Is there an emerging global conception of 'reasonable' cybersecurity? If not, what does that mean for cyber norm building efforts