I think there is a huge public misunderstanding of the technology. Technologically, the only way to obtain data on terrorism and cyberwar attacks is to collect it all the time. How the data is processed is what needs to be regulated in a democracy.

Russia is collecting all the data they can get about us. Even TikTok is spying on our children and their parents. And somehow, no one is bothered that the Chinese military has this data about us. Slowly, China and possibly Russia are gaining an advantage over us, because we do not know how to regulate spooks in a democracy ... they don't need to regulate, they just collect everything they can.

When Russia starts using cyber attack to disconnect our civilian infrastructure: electricity, water, heating, communications, transport, traffic etc. it will be too late to start collecting data.

Yes, we need oversight, absolutely. But the proper agencies also need the data. Oversight needs to be setup on how it is used. As it is, civil society is saying "if they have no data, they cannot abuse it". This is no longer a viable strategy and China and Russia are preparing to wage war against us, a war that will initially be cyberwar, because everyone is nuclear.