I wonder how it is legal for a bank to view data obtained by monitoring the Internet on the scale that only the NSA would be able: A Palantir user at a bank

I wonder how it is legal for a bank to view data obtained by monitoring the Internet on the scale that only the NSA would be able: A Palantir user at a bank can, in seconds, see connections between a Nigerian Internet protocol address, a proxy server somewhere within the U.S. and payments flowing out from a hijacked home equity line of credit, just as military customers piece together fingerprints on artillery shell fragments, location data, anonymous tips and social media to track down Afghani bombmakers.