I understand that what these companies are doing is illegal, and thus the court ruled correctly. But I cannot help but wonder if we, the public, are really focusing on the right thing here? Is "companies are using your reading history to target ads" really the same level of dangerous as "your government wants to read all your messages"? Why is the EU regulating privacy topics to the point were we no longer have acces…
If your issue is "I don't want to be on a government list" one part of the solution would be making sure there's no data to populate the list, and the other part is restricting anyone from assembling such a list. The former is what Norway is doing, but pretending only the latter needs to be addressed is ignoring human nature. "If you aggregate it, they will come".