[gpderetta]

Mass data retention and surveillance has been ruled illegal multiple times both by ECJ and ECHR (as it is in direct contravention with the right to privacy in article 8). In particular UK is still supposedly bound by the ECHR even after Brexit. Unsurprisingly, EU governments and UK in particular, do not care, and there is only so much these courts can do to enforce their judgments.