Article 10 — Processing of personal data relating to criminal convictions and offences

Consumer protectionLevel 1RegulationGDPRStage: AdoptedOfficial source

Processing of personal data relating to criminal convictions and offences or related security measures based on Article 6(1) shall be carried out only under the control of official authority or when the processing is authorised by Union or Member State law providing for appropriate safeguards for the rights and freedoms of data subjects. Any comprehensive register of criminal convictions shall be kept only under the control of official authority.

About this text

Adopted · applies from 25 May 2018 · Consolidated version of 4 May 2016 · Checked against EUR-Lex on 26 Oct 2026 · Official source

Status: Stage: Adopted
ProposalAgreedAdoptedWithdrawn
Map: On the map
Coverage: Not covered: national guidance, court decisions. Not covered yet. Consultations, draft standards and review dates for this article are not in our corpus.
Freshness: Release c89ff15e published 2 Nov 2026, 05:02 CET. This article checked word for word against EUR-Lex on 26 Oct 2026.
Shown: The whole page.
Failures: None.
Incomplete: No.

Time travel

Versions1

Implemented by · Level 20

None linked in our corpus. We hold 8 GDPR Level 2 acts; see all.

Explained by · Level 30

None linked in our corpus. We hold 50 GDPR Level 3 documents; see all.

Cited by5

6(4)(c)Lawfulness of processing 27(2)(a)Representatives of controllers or processors not established in the Union 30(5)Records of processing activities 35(3)(b)Data protection impact assessment 37(1)(c)Designation of the data protection officer

Defined terms0

None linked in our corpus.