Poland does relatively well because the Poles have a very good memory for the times when the communists still ruled and have managed to hold back quite a bit of legislation that would have made privacy intrusions a lot easier.

Something similar was thought to be the case in Germany but it turned out to be mostly a load of nonsense.

NL has a good name but in fact is one of the worst offenders.

Finland is trying really hard but has Russia and Sweden as neighbours and those are running roughshod over the rights of the Finnish citizens.

And so on... it's a sad state of affairs. The biggest sign your country has good privacy is because you're economically not a player, so being 'too small to matter' is one way in which you can differentiate to the point where you can give your citizens some privacy.

But as soon as you're an economically significant entity the fear factor starts to outweigh common sense and privacy goes right out the window, though there will definitely be an attempt to put some lipstick on the pig and make it look like we're all so much safer.