In the EU and UK, data protection legislation applies to governments' handling of their subjects' data too.