1 As regards the powers of the supervisory authorities to obtain from the controller or processor access to personal data and access to their premises, Member States may adopt by law, within the limits of this Regulation, specific rules in order to safeguard the professional or other equivalent secrecy obligations, in so far as necessary to reconcile the right to the protection of personal data with an obligation of professional secrecy. 2 This is without prejudice to existing Member State obligations to adopt rules on professional secrecy where required by Union law.
This recital of the General Data Protection Regulation clarifies article 90 GDPR (Obligations of secrecy).*
