GDPR risks infringing personal freedoms despite claims of data protection. It allows government overreach under vague exemptions for national security, facilitating potential misuse for surveillance. The regulation's loopholes disproportionately impact small businesses and fail its core objective of safeguarding personal data. While claiming to balance security and privacy, the lack of clear guidelines enables governments to bypass protections, increasing risks of surveillance and eroding democratic rights. The possibility of employing citizens' data for military use further blurs the line between public safety and individual liberties.
