Article 90 - Obligations of secrecy

Article 90 of the GDPR outlines the confidentiality obligations for supervisory authorities, bodies, offices and any natural or legal persons who receive personal data in the performance of their tasks. It requires them to keep the data secret, use it only for the intended purpose, and imposes penalties for unauthorized disclosure. The provision ensures that all parties handling EU personal data maintain strict secrecy to protect individuals' privacy.