Never Assume That Because the Law Exists the Powerful Will Follow the Law
Just because something is "the law" does not mean a company like Microsoft or an agency like the CIA is going to obey it.
This issue remains totally unsolved and nobody got punished for it: (the US actually buried the matter by compelling Assange to plead guilty, so it can happen again)
Who's going to hold them accountable now? █
Related: High-Level Criminals Associate Privacy With Crime Because They Want Privacy Only for Themselves (Control But No Accountability) | Massachusetts Institute of Tall Tales (MIT) Covers Up Bill Gates Bribery of MIT Through a High-Profile Pedophile, Citing No Evidence Other Than Representatives of Gates Himself