I personally take issue with this because it can be used by the USA to effectively target data protected under EU's GDPR, because the US has an agreement with Israel to send and share raw, non minimized, sigint without going through legal loopholes to sign proper consents within the US Agencies chain of command as required by the 2023 EU-U.S. Data Privacy Framework.

I understand the US' companies and the War in Ukraine made a lot of pressure on EU's lawmakers, but the lawmakers basically nullified the scope of GDPR (military side, in a world where being able to control domestic SIGINT is king), and made EU' domestic companies unable to compete against foreign ones with one single decision (economic side).

It was just irresponsible.