Article 6 does not differentiate between civil and criminal. > Processing shall be lawful only if and to the extent that at least one of the following applies:

Article 6 does not differentiate between civil and criminal. > Processing shall be lawful only if and to the extent that at least one of the following applies: > ... > processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller; https://gdpr-info.eu/art-6-gdpr/ https://gdpr-info.eu/art-6-gdpr/