Given that the EU is the land of protection of personal data and civil liberties, how did it get to the point where it is so prevalent? 
It all comes down to reliance on security measures that were intended to protect against genuine threats of terrorism but which are then used for illegal purposes