Yeah officially, but the Snowden stuff showed they just collect everything and only get signed off when they want to query and even then probably could without.
I mean it’s the spooks, they’ll do what they want. My point was really that moaning about Tesco knowing your shopping data is silly...