As regards the powers of the supervisory authorities to obtain from the controller or processor access to personal data and access to their premises, Member States may adopt by law, within the limits of this Regulation, specific rules in order to safeguard the professional or other equivalent secrecy obligations, in so far as necessary to reconcile the right to the protection of personal data with an obligation of professional secrecy. This is without prejudice to existing Member State obligations to adopt rules on professional secrecy where required by Union law.
GDPR Recital EN
Recital 164
Related across sources
Guidance Guidelines 05/2022 on the use of facial recognition technology in the area of law enforcement Guidance Version history Guidance Guidelines 9/2022 on personal data breach notification under GDPR News The Italian Supervisory Authority fined a company 120 000 EUR for tracking five employees who drove company cars News CNIL (France) - SAN-2025-014 News AEPD (Spain) - EXP202500113