# Information to be provided where personal data have not been obtained from the data subject 14(5) — GDPR — provision context

> Focused context for a single provision (14(5)), curated from overview.legal on 2026-08-22. Canonical: https://overview.legal/laws/gdpr/art-14#par-5
> Verify against the official text (EUR-Lex / wetten.overheid.nl) before relying on it.

Part of **Information to be provided where personal data have not been obtained from the data subject** (GDPR, full article: https://overview.legal/laws/gdpr/art-14).

## Provision text

### 14(5)

Paragraphs 1 to 4 shall not apply where and insofar as:

a) the data subject already has the information;
b) the provision of such information proves impossible or would involve a disproportionate effort, in particular for processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes, subject to the conditions and safeguards referred to in Article 89(1) or in so far as the obligation referred to in paragraph 1 of this Article is likely to render impossible or seriously impair the achievement of the objectives of that processing. In such cases the controller shall take appropriate measures to protect the data subject's rights and freedoms and legitimate interests, including making the information publicly available;
c) obtaining or disclosure is expressly laid down by Union or Member State law to which the controller is subject and which provides appropriate measures to protect the data subject's legitimate interests; or
d) where the personal data must remain confidential subject to an obligation of professional secrecy regulated by Union or Member State law, including a statutory obligation of secrecy.

## Cited by (exact-provision citations)

- **Judgment of the Court (Third Chamber) of 28 November 2024.#Nemzeti Adatvédelmi és Információszabadság Hatóság v UC.#Request for a preliminary ruling from the Kúria.#Reference for a preliminary ruling – Protection of natural persons with regard to the processing of personal data and the free movement of such data – Regulation (EU) 2016/679 – Data processed when drawing up a COVID-19 certificate – Data not collected from the data subject – Information to be provided – Exception to the obligation t** (case-law) — https://overview.legal/posts/132158
- **Judgment of the Court (First Chamber) of 10 December 2020.#Land Nordrhein-Westfalen v D.-H. T. as liquidator of J & S Service UG.#Request for a preliminary ruling from the Bundesverwaltungsgericht.#Reference for a preliminary ruling – Personal data – Regulation (EU) 2016/679 – Article 23 – Restrictions to the data subject’s rights – Significant financial interest – Enforcement of civil law claims – National legislation referring to the provisions of EU law – Tax data concerning a legal person –** (case-law) — https://overview.legal/posts/132326
- **Judgment of the Court (Third Chamber) of 28 November 2024.#Nemzeti Adatvédelmi és Információszabadság Hatóság v UC.#Request for a preliminary ruling from the Kúria.#Reference for a preliminary ruling – Protection of natural persons with regard to the processing of personal data and the free movement of such data – Regulation (EU) 2016/679 – Data processed when drawing up a COVID-19 certificate – Data not collected from the data subject – Information to be provided – Exception to the obligation t** ¶43 (case-law, Court of Justice of the European Union) — https://overview.legal/posts/132158
- **Judgment of the Court (Third Chamber) of 28 November 2024.#Nemzeti Adatvédelmi és Információszabadság Hatóság v UC.#Request for a preliminary ruling from the Kúria.#Reference for a preliminary ruling – Protection of natural persons with regard to the processing of personal data and the free movement of such data – Regulation (EU) 2016/679 – Data processed when drawing up a COVID-19 certificate – Data not collected from the data subject – Information to be provided – Exception to the obligation t** ¶38 (case-law, Court of Justice of the European Union) — https://overview.legal/posts/132158
- **Judgment of the Court (First Chamber) of 10 December 2020.#Land Nordrhein-Westfalen v D.-H. T. as liquidator of J & S Service UG.#Request for a preliminary ruling from the Bundesverwaltungsgericht.#Reference for a preliminary ruling – Personal data – Regulation (EU) 2016/679 – Article 23 – Restrictions to the data subject’s rights – Significant financial interest – Enforcement of civil law claims – National legislation referring to the provisions of EU law – Tax data concerning a legal person –** ¶9 (case-law, Court of Justice of the European Union) — https://overview.legal/posts/132326
- **Opinion 13/2018 on the draft list of the competent supervisory authority of Lithuania regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR)** (guidance) — https://overview.legal/posts/126307
- **EDPB-EDPS Joint Opinion 02/2023 on the Proposal for a Regulation of the European Parliament and of the Council on the establishment of the digital euro** (guidance) — https://overview.legal/posts/125823
- **EDPB-EDPS Joint Opinion 01/2023 on the Proposal for a Regulation of the European Parliament and of the Council laying down additional procedural rules relating to the enforcement of Regulation (EU) 2016/679** (guidance) — https://overview.legal/posts/125829
- **EDPB-EDPS Joint Opinion 03/2022 on the Proposal for a Regulation on the European Health Data Space** (guidance) — https://overview.legal/posts/125922
- **Opinion 18/2018 on the draft list of the competent supervisory authority of Portugal regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR)** (guidance) — https://overview.legal/posts/126297
- **Opinion 16/2018 on the draft list of the competent supervisory authority of the Netherlands regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR)** (guidance) — https://overview.legal/posts/126303
- **Opinion 01/2019 on the draft list of the competent supervisory authority of the Principality of Liechtenstein regarding the processing operations subject to the requirement of a data protection impact assessment (Article 35.4 GDPR)** (guidance) — https://overview.legal/posts/126254

---
Generated by overview.legal · https://overview.legal/laws/gdpr/art-14#par-5 · 2026-08-22