(b)

paragraph 5 is replaced by the following: ‘5. All storage, processing or exchange of information referred to in this Regulation is subject to Regulations (EU) 2016/679 Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ L 119, 4.5.2016, p. 1). and (EC) No 45/2001 Regulation (EC) No 45/2001 of the European Parliament and of the Council of 18 December 2000 on the protection of individuals with regard to the processing of personal data by the Community institutions and bodies and on the free movement of such data (OJ L 8, 12.1.2001, p. 1).’; of the European Parliament and of the Council. However, Member States shall for the purpose of the correct application of this Regulation, restrict the scope of the obligations and rights provided for in Articles 12 to 15, 17, 21 and 22 of Regulation (EU) 2016/679. Such restrictions shall be limited to what is strictly necessary in order to safeguard the interests referred to in point (e) of Article 23(1) of that Regulation, in particular to: (a) enable the competent authorities of the Member States to fulfil their tasks properly for the purposes of this Regulation; or (b) avoid obstructing official or legal enquiries, analyses, investigations or procedures for the purposes of this Regulation and to ensure that the prevention, investigation and detection of tax evasion and tax fraud is not jeopardised. The processing and storage of information referred to in this Regulation shall be carried out only for the purposes referred to in Article 1(1) of this Regulation and the information shall not be further processed in a way that is incompatible with those purposes. The processing of personal data on the basis of this Regulation for any other purposes, such as commercial purposes, shall be prohibited. The storage periods of this information shall be limited to the extent necessary to achieve those purposes. The storage periods of the information referred to in Article 17 of this Regulation shall be determined as per the limitation periods provided for in the legislation of the Member State concerned but no longer than ten years.

← art_1__point_17__point_a__text_2 · All articles · art_1__point_17__point_b__text_1 →

Source: EUR-Lex (Cellar) · retrieved 2026-10-14 · Text as adopted (Official Journal); later amendments are not incorporated in this text.