Article 13
Exemptions and restrictions
1\. Member States may adopt legislative measures to restrict the scope of the obligations and rights provided for in Articles 6 (1), 10, 11 (1), 12 and 21 when such a restriction constitutes a necessary measures to safeguard:
(a) national security;
(b) defence;
(c) public security;
(d) the prevention, investigation, detection and prosecution of criminal offences, or of breaches of ethics for regulated professions;
(e) an important economic or financial interest of a Member State or of the European Union, including monetary, budgetary and taxation matters;
(f) a monitoring, inspection or regulatory function connected, even occasionally, with the exercise of official authority in cases referred to in (c), (d) and (e);
(g) the protection of the data subject or of the rights and freedoms of others.
2\. Subject to adequate legal safeguards, in particular that the data are not used for taking measures or decisions regarding any particular individual, Member States may, where there is clearly no risk of breaching the privacy of the data subject, restrict by a legislative measure the rights provided for in Article 12 when data are processed solely for purposes of scientific research or are kept in personal form for a period which does not exceed the period necessary for the sole purpose of creating statistics.
SECTION VII
THE DATA SUBJECT'S RIGHT TO OBJECT
Smaranda Bara and Others v Casa Naţională de Asigurări de Sănătate and Others
Articles 10, 11 and 13 of Directive 95/46 preclude national measures that allow one public administrative body of a Member State to transfer personal data to another public administrative body, and allow the receiving body then to process that data, without informing the data subjects of the transfer or the processing.
Institut professionnel des agents immobiliers (IPI) v Geoffrey Englebert and Others
Member States may, but need not, transpose into national law one or more of the exceptions in Article 13(1) of Directive 95/46 to the duty to inform data subjects about the processing of their personal data. Article 13(1)(d) covers a private detective engaged by a professional body to investigate breaches of the ethical rules of a regulated profession, such as estate agents.