"But last year, the European Court of Justice struck down the EU’s data retention law. Judges said the directive was disproportionate because it allowed for the indiscriminate and mass collection of data from people not suspected of any crime."