If you don't store user data none of those applies. If you do want to store the data, those just specify what and how with enough detail that battalion of Face

If you don't store user data none of those applies. If you do want to store the data, those just specify what and how with enough detail that battalion of Facebook lawyers can't go around it. It's mostly sensible when you get around to implementing it. For example if you store data for say CCTV purpose, you have to tell people they are being monitored, for what reason, who administers the data etc. Article 6 covers filming the public spaces i.e. they don't have to give written consent because the extra security of security cameras provide considered greater good than individual. But at same time it allows processing only for those purposes. You can't just go on facebook and post some video from security camera of someone doing dumb shit. You can't just film inside toilet. You can go and monetize it in any way etc. You also need to do the rest of due diligence of making it secure, not sharing with 3rd parties unrelated to the goal etc. IIRC some company got $200k for doing exactly that, just posting basically some dumb shit people did, without even blurring out the people in all of the videos. Which triggered an audit that discovered that way more people that should had access to security footage. Similar things apply to storing and analyzing logs for security purpose. They are considered "greater good" under article 6 and you can store and use them for, say, blocking malicious users on WAF, but you can't then go and handle it to your marketing team and you would have to anonymize it if you for example wanted to give those logs to developers to debug problems.