<!-- headlesslaw {"release":{"id":"2d86bd12ba77a288053b34ea2517324b92d03c8039b7f5d156fa4002421384a1","published":"2026-11-10T16:06:46Z","pinned":false},"limits":{"coverage":{"history":"full","held_since":"2024-06-19","gaps":[],"covered":["AMLA L1"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"2d86bd12ba77a288053b34ea2517324b92d03c8039b7f5d156fa4002421384a1","release_published":"2026-11-10T16:06:46Z","checked_at":"2026-11-09","checked_against":"EUR-Lex"},"truncation":null,"failures":[],"incomplete":[]},"page":{"path":"/amla/articles/98","url":"https://www.headlesslaw.com/amla/articles/98","title":"Article 98 — Data protection","family":"l1_generated","work_id":"amla","status":"in_force","force_status":"in_force","date_state":"current","requested_date":null,"as_of":"2026-11-11","applies_from":"2025-07-01","application":{"state":"applicable","next":null,"dates":[{"at":"2025-07-01","note":"Article 108"}]},"version_label":"Consolidated version of 10 November 2025","check":{"against":"EUR-Lex","on":"2026-11-09"},"check_result":"matched","official_url":"https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02024R1620-20251110","valid_from":"2025-11-10","valid_until":null,"revision":1,"content_id":"d659dc5035e3fff1","change_date":null,"nearest_versions":["2024-06-19","2025-11-10"],"first_text_date":"2024-05-31","correction_applies":false,"versions":["2024-06-19","2025-11-10"],"version_url":"https://www.headlesslaw.com/amla/articles/98/versions/2025-11-10","revision_url":"https://www.headlesslaw.com/amla/articles/98/versions/2025-11-10/rev/d659dc5035e3fff1","versions_url":"https://www.headlesslaw.com/amla/articles/98/versions","relations_url":"https://www.headlesslaw.com/amla/articles/98/relations","source_line":null,"attribution":null}} -->
---
title: "Article 98 — Data protection"
type: regulation
legal_status: in_force
source: "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02024R1620-20251110"
source_retrieved: 2026-10-08
shortTitle: "Article 98 — Data protection"
instrument_type: level1_regulation
authority: Commission
binding: true
binding_character: binding
mica_level2: false
legal_basis: "Regulation (EU) 2024/1620"
instrument: amla
celex: "32024R1620"
regulation: AMLA
regulation-full: "Regulation (EU) 2024/1620"
article: 98
status: in_force
object_id: eu.amla.legal_text.article.98
text_version: "Consolidated version of 10 November 2025"
source_url: "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02024R1620-20251110"
check_status: matched
verified: true
last_checked: 2026-11-09
---

*In force · Consolidated version of 10 November 2025 · Verified 9 Nov 2026 · [Official source](https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02024R1620-20251110)*

1. <a id="p-1"></a>The processing of personal data on the basis of this Regulation for the purposes of ML/TF prevention as referred to in [Article 70](https://www.headlesslaw.com/amld6/articles/70) of Directive (EU) 2024/1640 and [Article 76](https://www.headlesslaw.com/amlr/articles/76) of Regulation (EU) 2024/1624 shall be considered necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Authority under Article 5 of Regulation (EU) 2018/1725 and Article 6 of Regulation (EU) 2016/679.

    When drafting guidelines and recommendations in accordance with [Article 54](54.md), having a significant impact on the protection of personal data, the Authority shall closely cooperate with the European Data Protection Board established by Regulation (EU) 2016/679 to avoid duplication, inconsistencies and legal uncertainty in the sphere of data protection. After being authorised by the Commission, the Authority shall also consult the European Data Protection Supervisor established by Regulation (EU) 2018/1725. The Authority may also invite national data protection authorities as observers in the process of drafting such guidelines and recommendations.
2. <a id="p-2"></a>In accordance with Article 25 of Regulation (EU) 2018/1725, the Authority shall be permitted to adopt internal rules which restrict the application of the rights of data subjects where such restrictions are necessary to the performance of the tasks referred in [Article 70](https://www.headlesslaw.com/amld6/articles/70) of Directive (EU) 2024/1640 and [Article 76](https://www.headlesslaw.com/amlr/articles/76) of Regulation (EU) 2024/1624.

***

[Chapter VI — General and final provisions](../chapters/vi.md) · [← Article 97](97.md) · [Article 99 →](99.md)
