GDPR also requires reflection when relying on "legitimate interests" to process data, to check it's necessary and doesn't pose a risk to people.
#DPDIBill enables orgs to side-step that process, through "recognised legitimate interests" for eg national security, crime.