GDPR-90-02
Requirement
90 — Obligations of secrecy
Specific rules must apply only to personal data obtained under secrecy obligation
Description
Any rules adopted by Member States under paragraph 1 shall apply only with regard to personal data which the controller or processor has received as a result of or has obtained in an activity covered...
Full Analysis & Evidence Requirements
Sign in to view the full obligation text, AI-generated applicability analysis, evidence checklists, and compliance mapping.
Sign In to ViewRelated Obligations
GDPR-90-01
Data Governance
Member States may adopt specific rules for supervisory authority powers re secrecy
GDPR-90-03
Reporting
Member States must notify Commission of adopted secrecy rules by 25 May 2018
GDPR-90-04
Reporting
Member States must notify Commission of subsequent amendments without delay
Map this obligation to your AI systems
ReguLume automatically maps regulatory obligations to your system inventory, identifies compliance gaps, and generates remediation plans.
Get Started