Yes, the one of the major points of Five Eyes is so that countries can circumvent their own domestic privacy laws. It may be illegal (or more legally precarious), for example, for GCHQ to tap UK citizens, but Aus or the US can and then share the data with them.