I'm sure Norwegian military intelligence has a semi legal access to meta data and contents of my calls: but at least it's clearly illegal for them. The largest isp/phone provider (telenor) actually fought back against the eu data collection directive because they had to store more data than they currently did (3 months).
But yeah, data protection in the private sector in the US is dismal.
But yeah, data protection in the private sector in the US is dismal.