They could have just left out Article 8. Its a “no interference by a public authority unless it want’s to.”
“Well-being of the country”, “protection of health or morals” are terms that make this statute irrelevant and dependent on the current mood of the EU.
Privacy needs to be an absolute right. Any invasion of privacy of any individual is a violation of their rights and needs to be treated as such with actual repercussions following misconduct.