Article 76 - Confidentiality

Article 76 of the GDPR mandates that supervisory authorities and any body receiving personal data in the performance of their duties must keep that information confidential, disclosing it only when authorised by Union or Member State law or with the data subject's consent. This provision ensures the protection of sensitive data throughout investigations, decision-making and enforcement activities.