Well-entrenched already. Lots of RFPs asking if my former employer's products provided appropriate tapping points.
(And the answer was no, we're customer premise gear that gets installed in Central Offices. Tapping is handled upstream of our devices. Have a nice day.)
Circuit-switched and core VoIP routing gear has had CALEA taps for quite a while now. Most of it flows full-time since it's expensive for carriers to switch only the traffic requested to the taps. Far simpler to just provide a full-time feed.
Customers are, of course, never told about any carrier's specific implementation of how they comply with these laws, nor given any warning that the equipment even exists, let alone that it operates 24/7.
This works to one small advantage. It's a flood of data like no other. The assumption is that the government will only have time for looking at some subset of it.
NSA runs datacenters out of power and space all the time, though. They built a nice new one in Utah for more capacity. New Mexico has some interesting stuff too. All you need is a lot of land, a direct feed from the power grid for your own substation, good access to lots of long-haul fiber optics that have extra capacity available, and oodles of money. The carriers are required to send you whatever data you want.
We happily provide government the money from our paychecks. The land, they've got. The rest is a data processing problem.
How many video cards have they bought this year? Video cards used as custom parallel processors do a great job of cracking encryption as part of a Linux supercomputing cluster.
GPU vs CPU was a game changer for the spooks years ago. Now it's already going mainstream. Here's an article on how passwords are cracked, and thinking it through logically, they're probably on the verge of being useless...
http://hackaday.com/2011/06/01/gpu-password-cracking-made-easy/
Just point that same tech en masse at weak encryption or have it sifting through VoIP traffic stored in a massive storage array, and you'll get the idea.
When they confiscate a hard disk, it probably doesn't even matter if you encrypted it with a tool like TrueCrypt. It's just going to take "them" longer to read it.