“Precisely because what happens is this targeted process, which means this is not about just some sort of mass look at everybody’s data. Most of the data will not be looked at all, will not be touched.”