{"release":{"id":"c89ff15ec1240a456b40735def079beeda55a0c372be7f3da154287997367ecf","published":"2026-11-02T04:02:35Z","pinned":false},"limits":{"coverage":{"history":"full","held_since":"2016-05-04","gaps":[],"covered":["GDPR L1"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"c89ff15ec1240a456b40735def079beeda55a0c372be7f3da154287997367ecf","release_published":"2026-11-02T04:02:35Z","checked_at":"2026-10-26","checked_against":"EUR-Lex"},"truncation":null,"failures":[],"incomplete":[]},"page":{"path":"/gdpr/articles/10","url":"https://www.headlesslaw.com/gdpr/articles/10","title":"Article 10 — Processing of personal data relating to criminal convictions and offences","family":"l1_generated","work_id":"gdpr","status":"in_force","force_status":"in_force","date_state":"current","requested_date":null,"as_of":"2026-11-02","applies_from":"2018-05-25","application":{"state":"applicable","next":null,"dates":[{"at":"2018-05-25","note":"Article 99(2)"}]},"version_label":"Consolidated version of 4 May 2016","check":{"against":"EUR-Lex","on":"2026-10-26"},"check_result":"matched","official_url":"https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02016R0679-20160504","valid_from":"2016-05-04","valid_until":"2018-05-25","revision":1,"content_id":"159e125eb3b34167","change_date":null,"nearest_versions":["2016-05-04"],"first_text_date":"2016-04-27","correction_applies":false,"versions":["2016-05-04"],"version_url":"https://www.headlesslaw.com/gdpr/articles/10/versions/2016-05-04","revision_url":"https://www.headlesslaw.com/gdpr/articles/10/versions/2016-05-04/rev/159e125eb3b34167","versions_url":"https://www.headlesslaw.com/gdpr/articles/10/versions","relations_url":"https://www.headlesslaw.com/gdpr/articles/10/relations","source_line":null,"attribution":null},"provenance":{"official_url":"https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02016R0679-20160504","check":{"result":"matched","checked_at":"2026-10-26","against":"EUR-Lex"},"repo_path":"spaces/gdpr/articles/10.md","body_sha256":"cec001903e6d646f0ee4e9f046299cba9d4fd76e39766c40f041a821be7dc5fe"},"units":[{"locator":"gdpr/art/10","kind":"article","status":"in_force","label":null,"heading":"Processing of personal data relating to criminal convictions and offences","text":"","marks":[],"revision":1,"text_hash":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","reason":null},{"locator":"gdpr/art/10/subpara/1","kind":"subparagraph","status":"in_force","label":null,"heading":null,"text":"Processing of personal data relating to criminal convictions and offences or related security measures based on Article 6(1) shall be carried out only under the control of official authority or when the processing is authorised by Union or Member State law providing for appropriate safeguards for the rights and freedoms of data subjects. Any comprehensive register of criminal convictions shall be kept only under the control of official authority.","marks":[],"revision":1,"text_hash":"328fd57dbec645081f31e7e6d862c0b52e40a4301758af24228c86f4d98534f4","reason":null}],"markdown":"---\ntitle: \"Article 10 — Processing of personal data relating to criminal convictions and offences\"\ntype: regulation\nlegal_status: in_force\nsource: \"https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02016R0679-20160504\"\nsource_retrieved: 2026-09-28\nshortTitle: \"Article 10 — Processing of personal data relating to criminal convictions and offences\"\ninstrument_type: level1_regulation\nauthority: Commission\nbinding: true\nbinding_character: binding\nmica_level2: false\nlegal_basis: \"Regulation (EU) 2016/679\"\ninstrument: gdpr\ncelex: \"32016R0679\"\nregulation: GDPR\nregulation-full: \"Regulation (EU) 2016/679\"\narticle: 10\nstatus: in_force\nobject_id: eu.gdpr.legal_text.article.10\ntext_version: \"Consolidated version of 4 May 2016\"\nsource_url: \"https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02016R0679-20160504\"\ncheck_status: matched\nverified: true\nlast_checked: 2026-10-26\n---\n\n*In force · Consolidated version of 4 May 2016 · Checked against EUR-Lex on 26 Oct 2026 · [Official source](https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02016R0679-20160504)*\n\n[Processing](https://www.headlesslaw.com/definitions/gdpr/processing) of [personal data](https://www.headlesslaw.com/definitions/gdpr/personal-data) relating to criminal convictions and offences or related security measures based on [Article 6(1)](6.md) shall be carried out only under the control of official authority or when the processing is authorised by Union or Member State law providing for appropriate safeguards for the rights and freedoms of data subjects. Any comprehensive register of criminal convictions shall be kept only under the control of official authority.\n\n***\n\n[Chapter II — Principles](../chapters/ii.md) · [← Article 9](9.md) · [Article 11 →](11.md)\n"}