3 ms·
It's a myth that gets repeated here. In reality, it's more subtle. Laws can be the legal basis for some processing, if it is deemed proportional; and in some
by cccbbbaaa 3y ago
It's a myth that gets repeated here. In reality, it's more subtle. Laws can be the legal basis for some processing, if it is deemed proportional; and in some countries (eg. France), government agencies cannot be fined.
GDPR doesn't apply to EU activities related to foreign policy or law enforcement, but EUCFR articles 7 and 8 still apply, as does regulation 2018/1725 for the former, and directive 2016/680 for the latter–so in theory, some activities are indeed exempted from GDPR, in practice, they're still subject to data protection laws that require essentially the same measures as GDPR.
Source: GDPR article 2 and 6. On a more personal note, I've already requested my data under GDPR, cited WP29/EDPB guidelines, and filed complaints against various govt agencies.