It is possible to have security, but not privacy, so although you believe your data may be secure, your privacy can be being invaded. You wouldn't know by who, so the best thing to do for now until privacy is better regulated is to be mindful of what you are doing on the internet.
Try to avoid opening emails from senders you don't 100% trust and know. Also, routinely check your PC using some kind of antivirus or data scrubbing software to ensure your system hasn't accrued keyloggers or malware that might give bad actors sensitive personal information.
You are still being watched, and your data being collected, so be careful what you send and to where you send it too. Innocent messages sent out of the country can easily make you become a person of interest for no reason.