You'd have to be a fool to trust lawmakers or law enforcement with your data and privacy by this point. They will always find some loophole in the language. Illegal to collect but not illegal to access what has been collected by allies (aka the Five Eyes). Just encrypt everything, use VPNs and whatever you push in plain/text may as well be public. Trust open technologies you understand, not politicians.
On top of encrypting everything/using VPNs, you'd have to be a fool to trust your data to a Five Eyes country in $current_year. Put that encrypted data/email on a server in Iceland or Seychelles, completely out of reach of the panopticon. You'd be almost as large a fool incorporating in a Five Eyes country for the same reasons. Bermuda and Nevis are beautiful countries for more than just the scenery. Take your assets…
Come now, I've watched my fair share of Hollywood spy movies.