The concrete bunker thing is a ridiculous diversion. Why are you even bringing that up?
I understand that privacy is a difficult problem especially when subject to legislation but bunkers have nothing to do with it. You will obviously provide user information to government on request, you and your staff maintain the ability to access user information at all times, and you have some procedures in place to try and make sure none of this is misused.
That’s ok.