It does not mean that EU can or wants to do it.

Actually, the processing of this data itself is probably a breach of GDPR.