Re: WTF?
Same rules, if Ms May(and her French and German counterparts) insists that it's necessary to track all UK internet use, and hack Belgian telcos to protect us from tourists then the Eu can't claim that US monitoring is unreasonable and a violation of human rights.
But safe harbour isn't to protect you from the spooks anyway, all the Eu inteligence agencies will happily hand over the data to the NSA in the name of cooperation.
It is protect you from companies. It is to stop Google noticing you searching for diabetes and selling that information to your bank so they can decide if you are a good mortgage risk, or Netflix noticing you watching CageAuxFolles and selling that to grindr