Agreed it’s a problem.

There should be limits on data retention (say 90 days). A government agent deliberately circumventing those limits should be punishable by a year in general prison population for each instance.