Government agencies can also intercept traffic on its way into a data centre, combing through conversations before routing them on to the operator.
"These are the nightmare scenarios that we were imagining," said Gus Hosein, executive director of Privacy International, which has brought legal action against the British government over mass surveillance.