[privacylawthrow]

EU governments are exempt from the requirements of GDPR. In some countries police can access large amounts of data without the need for a warrant. For example German police do not need a warrant to get passwords to email account, PIN numbers for mobile phones, mobile usernames, birthdates, telco information, or hospital data.

[germanier]

They do need a warrant for all the mentioned things in Germany (except birthdates if accessed in public registers).

The GDPR does apply to governments in general (see Article 2) but criminal law enforcement authorities are exempt.