GDPR actually specifically regulates citizen-government interactions as well (article 2), with special exceptions for law enforcement (article 2.2.d).

You could of course argue that authorities can still make up any kind of law enforcement related reason to exclude you anyways :)

Edit: My point is sorta that the exceptions are a whitelist not a blacklist.