Part 1 identifies the risks of data breaches for users of publicly available Internet services such as email, social networks and cloud computing, and the possible impacts for them and the European Information Society. It presents the latest technology advances allowing the analysis of user data and their meta-data on a mass scale for surveillance reasons. It identifies technological and organisational measures and the key stakeholders for reducing the risks identified. The main objective of Part 2 is to provide the European Parliament with policy options, based on technology foresight, with regard to the protection of the European Information Society against mass surveillance from a perspective of technology and organisational foresight.