[avar]

The GPDR is explicitly not about trying to get you protection from state-operated intelligence agencies, and in fact within the EU state agencies like that are explicitly exempt from it.

[M2Ys4U]

It would be if the EU had the legal powers to do so, however the EU's treaties reserve national security to the member states.

EU law does apply when national security concerns of non member states are engaged, though hence the Schrems cases succeeding (and why the UK in on shaky ground when it comes to equivalency decisions post-Brexit).

[kuschku]

That's wrong, GDPR explicitly applies to government agencies, police, etc.

Eurpol is currently on trial for violating it, as was the German BND previously.

[M2Ys4U]

The GDPR doesn't apply to the police, at least not in their capacity as law enforcement.

But it does have sister legislation - the Law Enforcement Directive[0] - that does apply many of the same principals.

[0] https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=celex%3A...