I think the point was that while the various governments in the EU deploy surveillance systems en masse, private companies can not.