> However, if they do anyway

They should face criminal penalties for violating people’s rights

> the data is actually used during investigations.

Absolutely no! All that data collected without due process (judicial warrant, paper trail, whatever is the norm in your neck of the woods) has to be treated as tainted.