Re: GDPR says no
One thing the police will be aware of is the extent of the exceptions granted to them under GDPR.
It's not about the police, it's about the companies holding and potentially releasing the data. You are allowed to hold this data for a limited time for your own purposes, such as cyberattacks, but not for the general behest of third parties. This is why the various data retention laws were struck down by the German constitutional court.
The police can always apply for, and will usuallly get, a warrant to look at the data but companies are not allowed to do their work for them.
