Artikkel 90
Obligations of secrecy

Offisielle tekster Retningslinjer
og beslutninger
Vurderinger
EU-regulering
Vurderinger
nasj. regulering
Vis forordningens fortaletekst relatert til art. 90 keyboard_arrow_down Skjul forordningens fortaletekst relatert til art. 90 keyboard_arrow_up

(164) As regards the powers of the supervisory authorities to obtain from the controller or processor access to personal data and access to their premises, Member States may adopt by law, within the limits of this Regulation, specific rules in order to safeguard the professional or other equivalent secrecy obligations, in so far as necessary to reconcile the right to the protection of personal data with an obligation of professional secrecy. This is without prejudice to existing Member State obligations to adopt rules on professional secrecy where required by Union law.

Det finnes ingen fortaletekst i direktivet relatert til art. 90.

GDPR

For the record, pursuant to Article 58, paragraph 1, points e) and f), the supervisory authorities have investigative powers allowing them access to the processed data, the processing means, and to the premises of the controller which can cause difficulties when the controller or the intended processor is subject to a duty of professional secrecy.

It is therefore logical that Article 90 allows Member States to adopt specific rules to protect the professional secret or other equivalent obligations of secrecy in such cases.

Each Member State must consider if such rules are necessary and proportionate for reconciling the right to personal data protection and the obligation of secrecy.

The rules on confidentiality that can be adopted by the Member States in order to define the powers of the supervisory authorities are limited to the personal data that the controller or the processor has received or obtained as part of an activity covered by the obligation of secrecy.

Finally, Article 90 (2) imposes on the Member States the obligation to notify the Commission of the rules adopted pursuant to this provision within two years after the publication of the Regulation in the Official Journal of the European Union; any subsequent amendment to these rules must be notified without delay to the Commission.

Direktivet

The Directive included no similar provision.

Utfordringer

Again, there is no harmonisation of the law made by the Regulation as it is up to the Member States to define such rules as they see fit.

Forordning
1e 2e

Art. 90

1.   Member States may adopt specific rules to set out the powers of the supervisory authorities laid down in points (e) and (f) of Article 58(1) in relation to controllers or processors that are subject, under Union or Member State law or rules established by national competent bodies, to an obligation of professional secrecy or other equivalent obligations of secrecy where this is necessary and proportionate to reconcile the right of the protection of personal data with the obligation of secrecy. Those rules shall apply only with regard to personal data which the controller or processor has received as a result of or has obtained in an activity covered by that obligation of secrecy.

2.   Each Member State shall notify to the Commission the rules adopted pursuant to paragraph 1, by 25 May 2018 and, without delay, any subsequent amendment affecting them.

1. forslag close

Art. 84 

1. Within the limits of this Regulation, Member States may adopt specific rules to set out the investigative powers by the supervisory authorities laid down in Article 53(2) in relation to controllers or processors that are subjects under national law or rules established by national competent bodies to an obligation of professional secrecy or other equivalent obligations of secrecy, where this is necessary and proportionate to reconcile the right of the protection of personal data with the obligation of secrecy. These rules shall only apply with regard to personal data which the controller or processor has received from or has obtained in an activity covered by this obligation of secrecy.

2. Each Member State shall notify to the Commission the rules adopted pursuant to paragraph 1, by the date specified in Article 91(2) at the latest and, without delay, any subsequent amendment affecting them.

2. forslag close

Art. 84 

1. (…) Member States may adopt specific rules to set out the (…) powers by the supervisory authorities laid down in points (da) and (db) of Article 53(1) in relation to controllers or processors that are subjects under Union or Member State law or rules established by national competent bodies to an obligation of professional secrecy, other equivalent obligations of secrecy or to a code of professional ethics supervised and enforced by professional bodies, where this is necessary and proportionate to reconcile the right of the protection of personal data with the obligation of secrecy. These rules shall only apply with regard to personal data which the controller or processor has received from or has obtained in an activity covered by this obligation of secrecy.

2. Each Member State shall notify to the Commission the rules adopted pursuant to paragraph 1, by the date specified in Article 91(2) at the latest and, without delay, any subsequent amendment affecting them.

Direktiv close

No specific provision

Art. 90

Taushetsplikt

1. Medlemsstatene kan vedta særlige regler for å fastsette tilsynsmyndighetenes myndighet omhandlet i artikkel 58 nr. 1 bokstav e) og f) i forbindelse med behandlingsansvarlige eller databehandlere som i henhold til unionsretten eller medlemsstatenes nasjonale rett eller regler fastsatt av nasjonale vedkommende organer omfattes av yrkesmessig taushetsplikt eller annen tilsvarende taushetsplikt, dersom det er nødvendig og står i et rimelig forhold til behovet for å bringe retten til vern av personopplysninger i samsvar med nevnte taushetsplikt. Nevnte regler får bare anvendelse på personopplysninger som den behandlingsansvarlige eller databehandleren har mottatt som følge av, eller har innhentet i forbindelse med, en aktivitet som omfattes av nevnte taushetsplikt.

2. Medlemsstatene skal senest 25. mai 2018 underrette Kommisjonen om de regler de vedtar i henhold til nr. 1, og uten opphold om eventuelle senere endringer som påvirker dem.

Gamle loven close

Ingen tilsvarende bestemmelse

close