To answer my own question, the top comment from urschrei links to an analysis from the Irish Council for Civil Liberties and Digital Rights Ireland, giving it a "C+ grade" on its adherence to "experts' best practice principles regarding government surveillance technologies".