See also Articles 7 and 8 of the Charter of Fundamental Rights of the European Union (https://www.europarl.europa.eu/charter/pdf/text_en.pdf). (side note, the ECHR is why European countries have strong privacy laws since the '70s.)
In principle, yes. In practice, no. National security is a matter of the member states. Note that the right to privacy is also in the Dutch constitution. From the little I know, the oversight mechanism in the Netherlands seems to be working to some extent but there are still plenty of caveats:
cccbbbaaa|2 years ago
The EDPS recently said that under the Charter, the infamous “Chat Control” would always be illegal in the EU: https://www.euractiv.com/section/law-enforcement/news/eu-wat....
andai|2 years ago
https://aboutintel.eu/update-dutch-dragnet-act/
jruohonen|2 years ago
https://aboutintel.eu/ctivd-bulk-datasets-held-by-intel-need...