It’s not “illegal” if we just contract a trusted ally to spy on our own citizens. The US, U.K., Germany, and the other five eyes do it. I’d been shocked if the French or Dutch aren’t doing it but I haven’t read about it myself.