Let's see, what's worse... Giving access to data in supposedly limited cases to an authority that's supposed to do it for the protection of the people, or; se

Let's see, what's worse... Giving access to data in supposedly limited cases to an authority that's supposed to do it for the protection of the people, or; sell the data to numerous third parties, who further make money of the data, while there's absolutely no assurance the data isn't bought by the aforementioned authority anyway?