Cite this version: /celex/32022R2554/ART_56/20260823-85307f9e/
That address is frozen: its bytes never change. This page shows the current text and moves when a newer capture is held. Corpus Merkle root 581628a5b36518981241d2b51f048aa46384f30a74bf648ef542c652028cdeff.

← SatoshiShrine·Source Pathfinder·Topics

DORA Article 56 — held text

Open the official source (EUR-Lex) →

DORA Article 56 — held text Article 56 Data Protection 1.

The ESAs and the competent authorities shall be allowed to process personal data only where necessary for the purpose of carrying out their respective obligations and duties pursuant to this Regulation, in particular for investigation, inspection, request for information, communication, publication, evaluation, verification, assessment and drafting of oversight plans.

The personal data shall be processed in accordance with Regulation (EU) 2016/679 or Regulation (EU) 2018/1725, whichever is applicable.

2.

Except where otherwise provided in other sectoral acts, the personal data referred to in paragraph 1 shall be retained until the discharge of the applicable supervisory duties and in any case for a maximum period of 15 years, except in the event of pending court proceedings requiring further retention of such data.

CHAPTER VIII Delegated acts 32022R2554

docs_evidence/eu-legislation/eurlex-full-text/20260823T093000Z/32022R2554.pdf · sha256 85307f9e2a0409826dd0f54489645935816d16e929f0db4db3ef15badd11d38c · saved and fingerprinted 20260823T093000Z · Article 56; PDF page 73; derived-text line 1793

Legal text reproduced from the official source under Commission Decision 2011/833/EU. Only the official publication is authentic. This page shows our saved copy of the text. It is not advice and does not decide whether any provision applies to anyone.