It doesn't have to (or said another way: it does by default), because its routes are build with laws. However, you could also say that things like the UK surveillance-kickback agreements are a form of routing around the law, and I would agree.