@mareklach @alanz @jjg I think most EU data protection law has an exemption for (EU member state) national security. Which is bleh.

But the GDPR might limit what Facebook etc can do