(238)
In relation to Union data protection law, the untargeted scraping of the internet or CCTV material to build-up or expand face recognition databases , i.e. the processing of personal data (collection of data and use of databases) would be unlawful and no legal basis under the GDPR, EUDPR and the LED could be relied upon.