GCHQ has effectively no legal limit, UK may 'technically' be under ECHR rules but they don't have means of verifying that they actually comply.