Different in different countries, but only where on the timeline we are. I'd say the changeover began earlier, or at least became obvious earlier, when surveillance started ramping up. Here in Sweden, the obvious shift was the FRA law, already in 2008-2009, when the military was formally allowed to snoop on internet traffic, which, of course, has been a slippery slope increase in their mandate since then. Then in 2014, the EU Data Retention Directive was another big red flag, especially later when Sweden decided to keep on doing it even after the Court of Justice of the European Union declared it invalid due to the EU Charter of Fundamental Rights.

[Bank-ID](https://stacker.news/items/402596) is another thing in the same line.