> For processing carried out for journalistic purposes or the purpose of academic artistic or literary expression, Member States shall provide for exemptions or derogations ... if they are necessary to reconcile the right to the protection of personal data with the freedom of expression and information.
You can of course shift the argument to "what is journalism?", which does indeed have some fuzzy boundaries, but to claim that investigating and exposing widespread government corruption is anywhere near those fuzzy boundaries is a stretch, to say the least.
In the United States, given our Constitution enumerates certain freedoms for the press, there is a rich corpus of case law drawing this delineation. I am not sure if such a corpus exists in the EU, and am fairly certain it does not exist in every one of the EU's twenty-eight member states.
The First Amendment says "Congress shall make no law...abridging the freedom of speech, or of the press..." [1]. The comma is the delineation. In case law, the exploration of this delineation has produced definitions with precedent [2].
More practically, the linked-to article explores "whether the 'institutional press' is entitled to greater freedom from governmental regulations or restrictions than are non-press individuals, groups, or associations," concluding "the speech and press clauses may be analyzed under an umbrella 'expression' standard, with little, if any, hazard of missing significant doctrinal differences." (TL; DR There is a line, but it does not appear to matter much.)
[1] https://law.justia.com/constitution/us/amendment-01/06-diffe...
[2] https://en.wikipedia.org/wiki/Freedom_of_the_press_in_the_Un...
"Anyone who publishes" would be a lousy exemption for privacy requirements. Facebook puts out blog posts. Does that count as publishing?
The history of the freedom of the press in the United States [1] is worth perusing, particularly the recent case law.
[1] https://en.wikipedia.org/wiki/Freedom_of_the_press_in_the_Un...