Not sure about this law but that sounds completely fine under GDPR. You need to keep your log files secure and not longer than necessary for what youre doing though.

https://termsfeed.com/blog/gdpr-recitals/#Recital_49_8211_En...