<!-- headlesslaw {"release":{"id":"c89ff15ec1240a456b40735def079beeda55a0c372be7f3da154287997367ecf","published":"2026-11-02T04:02:35Z","pinned":false},"limits":{"coverage":{"history":"from:2023-03-23","held_since":"2023-03-23","gaps":[],"covered":["MiFID II L1"],"not_covered":["national guidance","court decisions"]},"freshness":{"release_id":"c89ff15ec1240a456b40735def079beeda55a0c372be7f3da154287997367ecf","release_published":"2026-11-02T04:02:35Z","checked_at":"2026-10-26","checked_against":"EUR-Lex"},"truncation":null,"failures":[],"incomplete":[]},"page":{"path":"/mifid-ii/articles/78","url":"https://www.headlesslaw.com/mifid-ii/articles/78","title":"Article 78 — Data protection","family":"l1_generated","work_id":"mifid2","status":"in_force","force_status":"in_force","date_state":"current","requested_date":null,"as_of":"2026-11-02","applies_from":null,"application":null,"version_label":"Consolidated version of 6 June 2026","check":{"against":"EUR-Lex","on":"2026-10-26"},"check_result":"matched","official_url":"https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02014L0065-20260606","valid_from":"2023-03-23","valid_until":null,"revision":1,"content_id":"bb55c2f8c5b9cb91","change_date":null,"nearest_versions":["2023-03-23"],"first_text_date":"2014-05-15","correction_applies":false,"versions":["2023-03-23"],"version_url":"https://www.headlesslaw.com/mifid-ii/articles/78/versions/2023-03-23","revision_url":"https://www.headlesslaw.com/mifid-ii/articles/78/versions/2023-03-23/rev/bb55c2f8c5b9cb91","versions_url":"https://www.headlesslaw.com/mifid-ii/articles/78/versions","relations_url":"https://www.headlesslaw.com/mifid-ii/articles/78/relations","source_line":null,"attribution":null}} -->
---
title: "Article 78 — Data protection"
type: regulation
legal_status: in_force
source: "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02014L0065-20260606"
source_retrieved: 2026-09-28
shortTitle: "Article 78 — Data protection"
instrument_type: level1_directive
authority: Commission
binding: true
binding_character: binding
mica_level2: false
legal_basis: "Directive 2014/65/EU"
instrument: mifid2
celex: "32014L0065"
regulation: MiFID II
regulation-full: "Directive 2014/65/EU"
article: 78
status: in_force
object_id: eu.mifid2.legal_text.article.78
text_version: "Consolidated version of 6 June 2026"
source_url: "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02014L0065-20260606"
check_status: matched
verified: true
last_checked: 2026-10-26
---

*In force · Consolidated version of 6 June 2026 · Checked against EUR-Lex on 26 Oct 2026 · [Official source](https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02014L0065-20260606)*

The processing of personal data collected in or for the exercise of the supervisory powers including investigatory powers in accordance with this Directive shall be carried out in accordance with national law implementing Directive 95/46/EC and with Regulation (EC) No 45/2001 where applicable.

***

[Title VI — Competent authorities](../titles/vi.md) · [← Article 77](77.md) · [Article 79 →](79.md)