Article 90 GDPR (Obligations of Secrecy)

Article 90 of GDPR: Obligations of Secrecy

Article 90 of GDPR allows EU member countries to adopt specific rules concerning the powers granted to the supervisory authorities and their obligation of secrecy. 

Adoption of rules of professional secrecy (Article 90(1) GPR)

EU member countries may adopt laws or rules to subject the powers of the supervisory authority to the obligation of professional secrecy that is necessary and proportionate to reconcile the right to data protection and the obligation of secrecy.

Notification of the Commission (Article 90(2) GDPR)

EU member countries should adopt their rules by May 25, 2018, and without any delay any amendments affecting those rules.

Recitals applicable to Article 90 of GDPR

Relevant Recitals: 164

GDPR Regulation article-by-article overview

Read our comprehensive overview of the GDPR Regulation, article by article, where we summarize each of the 99 articles contained in GDPR to give you a complete understanding of its content.

Cited Legislation in Article 90 or relevant recitals


GDPR Text: Article 90 of GDPR and Relevant Recitals

GDPR Text Source: EUR-Lex

Official GDPR Text: General Data Protection Regulation 

Official GDPR Title: REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), corrected by Corrigendum, OJL 127, 23.5.2018, p. 2 ((EU) 2016/679)