[jvdh]

The CIOT system can not legally be queried "at will", they have to have permission. Although the bar for this permission is incredibly low, I believe there have been some cases where it was denied.

[waps]

Of course some government services have blanket permission. Example 1: the (dutch) IRS.