PEPPOL & ViDA …

Spying I don’t know but control, yes obviously.
There will be mandatory eReporting and it will use the PEPPOL network.

It starts in Belgium in 2028 but it’s a european wide obligation and should be everywhere sooner or later.

About the security of the data, the APs have to get certified, so there’s that.