In a little-noticed set of opinions issued on January 15, the European Court of Justice (ECJ) put forward a bold and unprecedented proposition—mass surveillance conducted by European Union (EU) member state national security services should operate within the bounds of the Union’s privacy laws.