<!-- headlesslaw {"release":{"id":"c89ff15ec1240a456b40735def079beeda55a0c372be7f3da154287997367ecf","published":"2026-11-02T04:02:35Z","pinned":false},"limits":{"coverage":{"history":"full","held_since":"2016-05-04","gaps":[],"covered":["GDPR L1"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"c89ff15ec1240a456b40735def079beeda55a0c372be7f3da154287997367ecf","release_published":"2026-11-02T04:02:35Z","checked_at":"2026-10-26","checked_against":"EUR-Lex"},"truncation":null,"failures":[],"incomplete":[]},"page":{"path":"/gdpr/articles/10","url":"https://www.headlesslaw.com/gdpr/articles/10","title":"Article 10 — Processing of personal data relating to criminal convictions and offences","family":"l1_generated","work_id":"gdpr","status":"in_force","force_status":"in_force","date_state":"current","requested_date":null,"as_of":"2026-11-02","applies_from":"2018-05-25","application":{"state":"applicable","next":null,"dates":[{"at":"2018-05-25","note":"Article 99(2)"}]},"version_label":"Consolidated version of 4 May 2016","check":{"against":"EUR-Lex","on":"2026-10-26"},"check_result":"matched","official_url":"https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02016R0679-20160504","valid_from":"2016-05-04","valid_until":"2018-05-25","revision":1,"content_id":"159e125eb3b34167","change_date":null,"nearest_versions":["2016-05-04"],"first_text_date":"2016-04-27","correction_applies":false,"versions":["2016-05-04"],"version_url":"https://www.headlesslaw.com/gdpr/articles/10/versions/2016-05-04","revision_url":"https://www.headlesslaw.com/gdpr/articles/10/versions/2016-05-04/rev/159e125eb3b34167","versions_url":"https://www.headlesslaw.com/gdpr/articles/10/versions","relations_url":"https://www.headlesslaw.com/gdpr/articles/10/relations","source_line":null,"attribution":null}} -->
---
title: "Article 10 — Processing of personal data relating to criminal convictions and offences"
type: regulation
legal_status: in_force
source: "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02016R0679-20160504"
source_retrieved: 2026-09-28
shortTitle: "Article 10 — Processing of personal data relating to criminal convictions and offences"
instrument_type: level1_regulation
authority: Commission
binding: true
binding_character: binding
mica_level2: false
legal_basis: "Regulation (EU) 2016/679"
instrument: gdpr
celex: "32016R0679"
regulation: GDPR
regulation-full: "Regulation (EU) 2016/679"
article: 10
status: in_force
object_id: eu.gdpr.legal_text.article.10
text_version: "Consolidated version of 4 May 2016"
source_url: "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02016R0679-20160504"
check_status: matched
verified: true
last_checked: 2026-10-26
---

*In force · Consolidated version of 4 May 2016 · Checked against EUR-Lex on 26 Oct 2026 · [Official source](https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02016R0679-20160504)*

[Processing](https://www.headlesslaw.com/definitions/gdpr/processing) of [personal data](https://www.headlesslaw.com/definitions/gdpr/personal-data) relating to criminal convictions and offences or related security measures based on [Article 6(1)](6.md) shall be carried out only under the control of official authority or when the processing is authorised by Union or Member State law providing for appropriate safeguards for the rights and freedoms of data subjects. Any comprehensive register of criminal convictions shall be kept only under the control of official authority.

***

[Chapter II — Principles](../chapters/ii.md) · [← Article 9](9.md) · [Article 11 →](11.md)