[pjc50]

GDPR has a huge law enforcement exemption. The only relevant EU law is probably the ECHR(+) right to privacy.

(+) Yes I know this isn't exactly the same