Article 23 - Restrictions

Article 23 of the GDPR allows EU member states to impose national-law restrictions on the regulation's provisions when necessary for reasons such as national security, defence, public security or the prevention of crime, provided the measures are proportionate and do not undermine the core protection of personal data.