They already abide by the GDPR. There are exemptions on the GDPR for: national security; defence; public security; the prevention, investigation, detection or prosecution of criminal offences; etc.