The same day that France's privacy regulator ruled an unnamed company could not use Google Analytics without violating the GDPR, on the other side of the Atlantic, news broke that the CIA had been collecting bulk data on Americans for several years without a warrant.