[gnud]

I doubt those exceptions cover spying on behalf of a third party who is not party to the GDPR.