Ask HN: Do Governmental organizations have less obligations under GDPR than NGO?

As I understood it Governmental organizations do not have as great obligations under GDPR than NGOs but according to the Danish Datatilsynet I was just told that:

>The DPA can inform you that according to GDPR, controllers – whether be a public body or private company – are obligated to follow the same set of rules. There are some rules that only apply to certain types of controllers, such as GDPR article 6(e), which is only applicable to public bodies. These differences do not entail that public bodies have fewer obligations under the GDPR, than private companies.

Does anyone have any links to articles, arguments that Governmental organizations have less of an obligation than NGOs? I am wondering if I have just asked my question poorly and been told something that is technically correct but in practice will turn out to be somewhat different?