GDPR for Tasks Carried Out in Public Interest - keskival/ai_enabled_transparency_of_governance_and_power GitHub Wiki

GDPR has an exception for "tasks carried out in public interest".

processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;

This cause and projects within would naturally refer to that exception and to general journalistic freedom.