# Directive 2014/41/EU of the European Parliament and of the Council of 3 April 2014 regarding the European Investigation Order in criminal matters, Article 20: Protection of personal data

Extent: E+W+S+N.I.

When implementing this Directive, Member States shall ensure that personal data are protected and may only be processed in accordance with Council Framework Decision 2008/977/JHA and the principles of the Council of Europe Convention for the protection of Individuals with regard to the Automatic Processing of Personal Data of 28 January 1981 and its Additional Protocol.
Access to such data shall be restricted, without prejudice to the rights of the data subject. Only authorised persons may have access to such data.

---
Source: https://www.legislation.gov.uk/eudr/2014/41/article/20 (the official version)
Page: https://openlegislation.uk/eu-directive-2014-41/article-20
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.