Re: Backups
"GDPR has specific exemptions for law enforcement."
Certainly you don't need consent (obviously) to process PII, but I thought they still couldn't do whatever they fancied, and indeed they were deleting this information off the PNC database because of GDPR (maybe it's a slightly different law then?).