LOL you're delusional. EU privacy laws are not only quite strong, they are often so strong as that some common sense government action is inhibited.
E.g. In Germany there are no average speed cameras, because data privacy laws prohibit a government from recording citizen information that can be used to track citizens (e.g. if the used a certain road) unless they have been accused of a crime. I.e. break the speed, record the license plate. But you can't record a license plate without knowing if the person has broken the speed, so you can't compare it to the next camera, thus privacy laws prohibit average speed cameras.
In the Netherlands the tax department just had a whole year's worth of cases tossed out of court regarding the registration of tax free company lease vehicles, ... because they asked the traffic department to share red light camera fining data and cross referenced it against people's logbook. That's a court throwing out cases because the government asking the government for data lawfully collected by the government to compare against another government data set was a breach of privacy.
Every time any government has tried to enact back door laws, they have been thrown out by the ECJ because of ... privacy regulations.
In Ireland the courts ordered government national security surveillance data destroyed because of privacy laws.
In fact the reason that cloud providers need to store EU citizen data within the EU is precisely because the EU has much stricter privacy laws than the USA.