A Member State police authority processes personal data solely for the prevention, investigation, detection, or prosecution of criminal offences. Which material-scope statement best reflects the GDPR’s design?
Select an answer to reveal the explanation.
Short Explanation
Think of traffic rules for ordinary cars versus a separate rulebook for marked patrol cars on a crime call. Everyday GDPR is the ordinary-car book; criminal-investigation processing by competent authorities usually rides under its own EU instrument. Do not force every badge into the consumer-privacy playbook.
Full Explanation
Article 2(2)(d) excludes from the GDPR processing by competent authorities for the purposes of prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties. That processing is primarily addressed by Directive (EU) 2016/680 (LED) and related instruments. The exclusion is purpose- and actor-specific, not a claim that no EU rules apply at all.