There are many loopholes in the law. For example, the law permits the GCSB to retain any communication that is "incidentally obtained", and to pass that communication to the police, all without a warrant.