Doesn't the way they went about this have the same issue as the NSA, etc., going to the UK or other jurisdictions to get data on Americans when they can't legal

Doesn't the way they went about this have the same issue as the NSA, etc., going to the UK or other jurisdictions to get data on Americans when they can't legally obtain that data? If that is shady, then why isn't this also called out? It looks like this is a method to circumvent the law.