What derogations does the GDPR permit?
Article 23 enables Member States to introduce derogations to the GDPR in certain situations.
Member States can introduce exemptions from the GDPR’s transparency obligations and individual rights, but only where the restriction respects the essence of the individual’s fundamental rights and freedoms and is a necessary and proportionate measure in a democratic society to safeguard:
National security;
Defence;
Public security;
The prevention, investigation, detection or prosecution of criminal offences; other important public interests, in particular economic or financial interests, including budgetary and taxation matters, public health and security;
The protection of judicial independence and proceedings;
Breaches of ethics in regulated professions;
Monitoring, inspection or regulatory functions connected to the exercise of official authority regarding security, defence, other important public interests or crime/ethics prevention;
The protection of the individual, or the rights and freedoms of others;
The enforcement of civil law matters.
What about other Member State derogations or exemptions?
Chapter IX provides that Member States can provide exemptions, derogations, conditions or rules in relation to specific processing activities.
These include processing that relates to:
Freedom of expression and freedom of information;
Public access to official documents;
National identification numbers;
Processing of employee data;
Processing for archiving purposes and for scientific or historical research and statistical purposes;
Secrecy obligations;
and churches and religious associations.
Follow us on Social Media
