Set by the law · GDPR Art. 91(1)
Churches and religious associations
In plain English
Churches and religious bodies that already had comprehensive data protection rules when the GDPR entered into force may keep them if brought into line with the GDPR, under an independent, possibly church-specific, supervisory authority.
The official text
Where in a Member State, churches and religious associations or communities apply, at the time of entry into force of this Regulation, comprehensive rules relating to the protection of natural persons with regard to processing, such rules may continue to apply, provided that they are brought into line with this Regulation.
Churches and religious associations which apply comprehensive rules in accordance with paragraph 1 of this Article shall be subject to the supervision of an independent supervisory authority, which may be specific
Related
The official text is quoted word for word from the English version of the source named under it; only the version published in the Official Journal of the EU is legally binding. The plain-English line is Fino’s own summary, not legal advice.