I would rather the NSA get my data than the BND though. But GDPR doesn't protect me from the latter. The intelligence agency at home is always a bigger threat to you than any foreign actor.