--- title: "Article 90 — Obligations of secrecy" type: regulation legal_status: in_force source: "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02016R0679-20160504" source_retrieved: 2026-09-28 shortTitle: "Article 90 — Obligations of secrecy" instrument_type: level1_regulation authority: Commission binding: true binding_character: binding mica_level2: false legal_basis: "Regulation (EU) 2016/679" instrument: gdpr celex: "32016R0679" regulation: GDPR regulation-full: "Regulation (EU) 2016/679" article: 90 status: in_force object_id: eu.gdpr.legal_text.article.90 text_version: "Consolidated version of 4 May 2016" source_url: "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02016R0679-20160504" check_status: matched verified: true last_checked: 2026-10-26 --- *In force · Consolidated version of 4 May 2016 · Checked against EUR-Lex on 26 Oct 2026 · [Official source](https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02016R0679-20160504)* 1. Member States may adopt specific rules to set out the powers of the supervisory authorities laid down in points (e) and (f) of [Article 58(1)](58.md) in relation to controllers or processors that are subject, under Union or Member State law or rules established by national competent bodies, to an obligation of professional secrecy or other equivalent obligations of secrecy where this is necessary and proportionate to reconcile the right of the protection of [personal data](https://www.headlesslaw.com/definitions/gdpr/personal-data) with the obligation of secrecy. Those rules shall apply only with regard to personal data which the [controller](https://www.headlesslaw.com/definitions/gdpr/controller) or [processor](https://www.headlesslaw.com/definitions/gdpr/processor) has received as a result of or has obtained in an activity covered by that obligation of secrecy. 2. Each Member State shall notify to the Commission the rules adopted pursuant to paragraph 1, by 25 May 2018 and, without delay, any subsequent amendment affecting them. *** [Chapter IX — Provisions relating to specific processing situations](../chapters/ix.md) · [← Article 89](89.md) · [Article 91 →](91.md)