Set by the law · GDPR Art. 90(1)
Professional secrecy (obligations of secrecy)
In plain English
EU countries may adapt the investigative powers of data protection authorities over people bound by professional secrecy, where necessary and proportionate to reconcile data protection with that secrecy.
The official text
Member States may adopt specific rules to set out the powers of the supervisory authorities laid down in points (e) and (f) of Article 58(1) in relation to controllers or processors that are subject, under Union or Member State law or rules established by national competent bodies, to an obligation of professional secrecy or other equivalent obligations of secrecy where this is necessary and proportionate to reconcile the right of the protection of personal data with the obligation of secrecy.
Related
The official text is quoted word for word from the English version of the source named under it; only the version published in the Official Journal of the EU is legally binding. The plain-English line is Fino’s own summary, not legal advice.