GDPR for Tasks Carried Out in Public Interest - keskival/ai_enabled_transparency_of_governance_and_power GitHub Wiki
GDPR has an exception for "tasks carried out in public interest".
processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
This cause and projects within would naturally refer to that exception and to general journalistic freedom.