In the same vein, corporate surveillers are roughly bound by law; government surveillers... aren't.

For example, EU corporations are required by GDPR to comply with deletion requests, unless they are asked to retain the data by a government.