In Europe, and many other countries they are not a privacy issue; it's technically impossible to use them for surveillance as the QR codes do not contain any identifiable information.