Source: OJ L 119, 4.5.2016, pp. 1–88 · Consolidated text

Artikel 10 Verarbeitung von personenbezogenen Daten über strafrechtliche Verurteilungen und Straftaten

Summary What does Article 10 of the GDPR regulation say?

This short but important article addresses a specific and sensitive category of personal data: information relating to criminal convictions, offences, and related security measures.

Building on Article 6(1), which sets out the lawful bases for processing personal data generally, Article 10 imposes stricter conditions on this particular type of data.

Processing is only permitted when carried out under the control of an official authority, or when expressly authorised by Union or Member State law that provides appropriate safeguards.

The article also addresses the keeping of comprehensive criminal conviction registers, restricting these exclusively to official authority control.

Important points:

Processing of personal data relating to criminal convictions and offences must be carried out under the control of official authority or be authorised by Union or Member State law providing for appropriate safeguards.
Any comprehensive register of criminal convictions shall be kept only under the control of official authority.
This article builds directly on Article 6(1), applying heightened restrictions to this sensitive category of data beyond the standard lawful basis requirements.

Springlex's summary of the article is a reading aid, not a substitute for the legal text.

Die Verarbeitung personenbezogener Daten über strafrechtliche Verurteilungen und Straftaten oder damit zusammenhängende Sicherungsmaßregeln aufgrund von Artikel 6 Absatz 1 darf nur unter behördlicher Aufsicht vorgenommen werden oder wenn dies nach dem Unionsrecht oder dem Recht der Mitgliedstaaten, das geeignete Garantien für die Rechte und Freiheiten der betroffenen Personen vorsieht, zulässig ist. Ein umfassendes Register der strafrechtlichen Verurteilungen darf nur unter behördlicher Aufsicht geführt werden.

Table of contents

Springlex and this text is meant purely as a documentation tool and has no legal effect. No liability is assumed for its content. The authentic version of this act is the one published in the Official Journal of the European Union.