(164) With regard to the power of supervisory authorities to obtain from a controller or processor access to personal data and to the premises, Member States may, within the limits of this Regulation, adopt specific provisions to protect the obligation of professional secrecy or other equivalent secrecy, insofar as this is necessary to reconcile the right to the protection of personal data with the obligation of professional secrecy. This is without prejudice to existing obligations of Member States to adopt professional secrecy provisions where required by Union law.
„We attended training 2 years ago. That is sufficient."
Are you sure about that?

