Comment by tpm

Data collection for security and intelligence purposes by governments is exempt from GDPR rules, I think.