From what I've heard, the Nordic countries like Netherlands, Norway, Finland, etc. and some Eastern European countries like Romania are people friendly (at least for now).
I quickly checked for the Netherlands and it seems there's no big practical difference.
The 2017 Act on Intelligence and Security Services allows Dutch intelligence and security services to tap into internet traffic without giving clear reasons or oversight.
Doesn't sound all that "people friendly" to me.
There's a difference between privacy laws concerning companies and public institutions (where the countries you mentioned score indeed very high) and access to internet traffic by certain government agencies.
The latter is legally possible (often without requiring strict legitimisation) in all of them. Officially there might be differences when it comes to legal requirements, but in practise government intelligence and security services have full access to internet traffic anyway.
Also, Netherlands is part of nine-eyes (and so are Denmark and Norway for that matter)
And it's not a Nordic country neither geographically nor in spirit. It has an economic system that's much closer than that of the UK and US than the Nordics.
The 2017 Act on Intelligence and Security Services allows Dutch intelligence and security services to tap into internet traffic without giving clear reasons or oversight.
Doesn't sound all that "people friendly" to me.
There's a difference between privacy laws concerning companies and public institutions (where the countries you mentioned score indeed very high) and access to internet traffic by certain government agencies.
The latter is legally possible (often without requiring strict legitimisation) in all of them. Officially there might be differences when it comes to legal requirements, but in practise government intelligence and security services have full access to internet traffic anyway.