2.

In particular, any legislative measure referred to in paragraph 1 shall contain specific provisions at least, where relevant, as to: the purposes of the processing or categories of processing; the categories of personal data; the scope of the restrictions introduced; the safeguards to prevent abuse or unlawful access or transfer; the specification of the controller or categories of controllers; the storage periods and the applicable safeguards taking into account the nature, scope and purposes of the processing or categories of processing; the risks to the rights and freedoms of data subjects; and the right of data subjects to be informed about the restriction, unless that may be prejudicial to the purpose of the restriction.

Directive (EU) 2019/1937 of the European Parliament and of the… (EU) — sign in to see which provisions, and what they say.

← art_23__para_1__point_j__text_1 · All articles · art_23__para_2__text_1 →

Source: EUR-Lex (Cellar) · retrieved 2026-09-25 · Text as adopted (Official Journal); later amendments are not incorporated in this text.