At its core, this case is about a conflict of law between US surveillance laws which demand surveillance and EU data protection laws that require privacy.