Article 10 Processing of personal data relating to criminal convictions and offences

This short but important article addresses a specific and sensitive category of personal data: information relating to criminal convictions, offences, and related security measures.

Building on Article 6(1), which sets out the lawful bases for processing personal data generally, Article 10 imposes stricter conditions on this particular type of data.

Processing is only permitted when carried out under the control of an official authority, or when expressly authorised by Union or Member State law that provides appropriate safeguards.

The article also addresses the keeping of comprehensive criminal conviction registers, restricting these exclusively to official authority control.

Important points:

• Processing of personal data relating to criminal convictions and offences must be carried out under the control of official authority or be authorised by Union or Member State law providing for appropriate safeguards.
• Any comprehensive register of criminal convictions shall be kept only under the control of official authority.
• This article builds directly on Article 6(1), applying heightened restrictions to this sensitive category of data beyond the standard lawful basis requirements.