Hacker News new | ask | show | jobs
by ThePowerOfFuet 2405 days ago
The GDPR contains explicit exceptions for police and national security; see Recital 16, Article 23(1), etc.
2 comments

They were not police, and unless they were directly hired by GCHQ or similar, they were not working for UK natsec either.
I doubt those exceptions cover spying on behalf of a third party who is not party to the GDPR.