Data about criminal convictions and offences can only be processed under the control of an official authority or where authorised by law with appropriate safeguards.
Official text & source
Article 10 of the General Data Protection Regulation (Regulation (EU) 2016/679). Read the full, authoritative text on EUR-Lex.
Official text
Verbatim text of Article 10 of the General Data Protection Regulation — Regulation (EU) 2016/679.
1 Processing of personal data relating to criminal convictions and offences or related security measures based on Article 6 (1) shall be carried out only under the control of official authority or when the processing is authorised by Union or Member State law providing for appropriate safeguards for the rights and freedoms of data subjects. 2 Any comprehensive register of criminal convictions shall be kept only under the control of official authority.
Source: Regulation (EU) 2016/679 (OJ L 119, 4.5.2016, p. 1). Official text reproduced from EUR-Lex — © European Union. Only European Union legislation published in the Official Journal is deemed authentic.
Related articles
These summaries are a plain-English orientation only and are not a substitute for the official text of the Regulation or for legal advice.
Need to apply Article 10?
Our data-protection lawyers turn the text into a plan.