Article 1 9

(a)

where the processing is carried out in the course of an activity which falls outside the scope of Union law;

(b)

where the processing is carried out by competent authorities for the purposes of the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties, including the safeguarding against and the prevention of threats to public security.