security is totally different from privacy

Executive order isn't a law though.

That EO is also focused on commercial security, not citizen privacy:

The sweeping directive, signed Thursday, covers a range of topics including securing federal communications networks against foreign snoops, issuing tougher sanctions for ransomware gangs, requiring software providers to develop more secure products, and using AI to boost America's cyber defense capabilities, among others.