Duty of confidentiality
Where necessary and proportionate to reconcile the right to the protection of personal data with the obligation of professional secrecy, Member States may lay down specific rules concerning the powers of supervisory authorities referred to in points (e) and (f) of Article 58(1) in relation to controllers or processors who are subject to professional secrecy or other equivalent obligations of secrecy under Union law, Member State law or regulations adopted by national competent authorities. Those rules shall apply only in relation to personal data received or obtained by the controller or processor in the context of an activity covered by that obligation of confidentiality.
Each Member State shall notify the Commission of the rules it has adopted pursuant to paragraph 1 by May 25, 2018, and without delay of any amendments thereto.
