§ GDPR · Article 10

GDPR Article 10: Obligations, Deadlines & Penalties

Regulation (EU) 2016/679, Article 10 · All obligations · GDPR

At a glance

Article 10 of the GDPR imposes 2 obligations on controller.

§ Obligations

All obligations under Article 10

Obligation 1

Processing of personal data relating to criminal convictions and offences or related security measures shall be carried out only under the control of official authority or when authorised by Union or Member State law providing for appropriate safeguards. Regulation (EU) 2016/679, Article 10, Article 10

Obligated entity: controller
Action required: restrict processing
Deadline: —
Penalty: —

Obligation 2

Any comprehensive register of criminal convictions shall be kept only under the control of official authority. Regulation (EU) 2016/679, Article 10, Article 10

Obligated entity: controller
Action required: maintain under control
Deadline: —
Penalty: —

§ Frequently asked

Questions about Article 10

Who must comply with Article 10 of the GDPR? +

controller.

What does Article 10 of the GDPR require? +

restrict processing maintain under control

Need a cross-border briefing on GDPR Article 10?

Search Fontvera ↵

All EU obligation pages · All GDPR articles