@Curia Interesting … if I read this correctly, then the mere fact that it is theoretically possible for a nominally independent body to examine the collection of personal data *after it has already been gathered and processed* and in principle conclude that that shouldn’t have been done, is equivalent to personal data protection in the EU?

I thought that we pretended to have privacy protection over here?