The rights of the data subjects (under Articles 12 to 22 GDPR) and the transparency requirement under Art. 5 GDPR do not apply to certain public bodies (e.g., intelligence or security services, financial authorities, investigative authorities) (Art. 11-17 of the Belgian Data Protection Act).