I am pretty sure there would have to be a court order, i.e. a severe violation would have to have good ground to be suspected.

No court order. Just a suspicion against an individual, and a process to follow. Plus, you have to tell them. There is no mass surveillance without notice, correct.