I think it's up to one to enforce privacy, I'll be happy if Jolla doesn't make an active effort to inform government agencies about data that they have, and instead make an active effort to avoid doing so. This is a lot easier to do in the EU than in the US though.