Does the law really restrict what Google can do?

I believe it does, yes. At least the law is public and you therefore know what the rules of the game are in the case of corporations and can hold them to it or point out infractions.

With the NSA there is no public law governing their activities (or at least no law that they seem to respect, as you note).