Skip to content
← GDPR: overview of provisions

Regulation (EU) 2016/679 (GDPR) · Chapter II · Principles

Art. 10 · Processing of personal data relating to criminal convictions and offences

Text

Processing of personal data relating to criminal convictions and offences or related security measures based on Article 6(1) shall be carried out only under the control of official authority or when the processing is authorised by Union or Member State law providing for appropriate safeguards for the rights and freedoms of data subjects. Any comprehensive register of criminal convictions shall be kept only under the control of official authority.

Text: EUR-Lex, CELEX 32016R0679 (consolidated text with corrigenda).

Commentary

Data on convictions and criminal offences may be processed only by a public authority, or by anyone else only on the basis of a law providing appropriate safeguards.