These articles again throw around and conflate the words “illegal” and “violation of TOS” which are two vastly different things. I’m not an expert in EU privacy law, but under US law, nothing that has occurred here (that has been publicly disclosed) was “illegal”. There are certainly potential civil lawsuits here, but nothing “illegal”.
Thanks for the response. You make good points; I guess we'll have to wait and see what gets uncovered. The most I know that has been uncovered so far is the admission by CA heads that they bribe officials [1], but given that it wasn't exactly a sworn testimony (or even a statement about a concrete case) I could see them getting away with it legally.