They already abide by the GDPR. There are exemptions on the GDPR for: national security; defence; public security;
the prevention, investigation, detection or prosecution of criminal offences; etc.
I'm suggesting it's a power play from the governments using privacy as an excuse.