The EU already allows governments to use spy on their citizens with stuff like Pegasus. They are just making it easier to buy and sell that kind of software.
Secret services are one thing, police operations and investigations are another, spying your own citizens for the sake of spying them and collecting their data is not allowed in EU, but it happened in US (we have proof) and when it happened in Europe it was US companies doing it (Cambridge Analytica data scandal, to name one, was made possible by Facebook).
Secret services are one thing, police operations and investigations are another, spying your own citizens for the sake of spying them and collecting their data is not allowed in EU, but it happened in US (we have proof) and when it happened in Europe it was US companies doing it (Cambridge Analytica data scandal, to name one, was made possible by Facebook).
There's that.