“…common law in this respect does not satisfy the requirements of the ECrtHR and of the ECJ for certainty and foreseeability as to its effects: Zakharov v Russia (2016) 63 EHRR 17 (at paragraphs 228-229). He emphasised that the common law does not specify with any particularity or any clear limitation what data may be collected. He relie…”