is data hoarding necessary for lawful surveillance?