Version status: Amended | Document consolidation status: Updated to reflect all known changes
Version date: 30 December 2019 - onwards
  Version 3 of 3    

Article 41

1. The processing of personal data under this Directive is subject to Regulations (EU) 2016/679 [Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ L 119, 4 5 2016, p 1).] and (EU) 2018/1725 [Regulation (EU) 2018/1725 of the European Parliament and of the Council of 23 October 2018 on the protection of natural persons with regard to the processing of personal data by the Union institutions, bodies, offices and agencies and on the free movement of such data, and repealing Regulation (EC) No 45/2001 and Decision No 1247/2002/EC (OJ L 295, 21 11 2018, p 39).] of the European Parliament and of the Council.

2. Personal data shall be processed by obliged entities on the bas