Data & Privacy
- Data Act
- Data Governance Act
- ePrivacy Directive
- GDPR
AI & Trust
- Artificial Intelligence Act
Cybersecurity
- Cybersecurity Act
- DORA
- NIS2
Digital Services & Media
- Digital Markets Act
- Digital Services Act
- European Media Freedom Act
General Data Protection Regulation
CHAPTER I
General provisionsArticles 1 — 4
CHAPTER II
PrinciplesArticles 5 — 11
CHAPTER III
Rights of the data subjectArticles 12 — 23
CHAPTER IV
Controller and processorArticles 24 — 43
CHAPTER V
Transfers of personal data to third countries or international organisationsArticles 44 — 50
CHAPTER VI
Independent supervisory authoritiesArticles 51 — 59
CHAPTER VII
Cooperation and consistencyArticles 60 — 76
CHAPTER VIII
Remedies, liability and penaltiesArticles 77 — 84
CHAPTER IX
Provisions relating to specific processing situationsArticles 85 — 91
CHAPTER X
Delegated acts and implementing actsArticles 92 — 93
CHAPTER XI
Final provisionsArticles 94 — 99
Controller and processor
ARTICLE 24
Responsibility of the controller
ARTICLE 25
Data protection by design and by default
ARTICLE 26
Joint controllers
ARTICLE 27
Representatives of controllers or processors not established in the Union
ARTICLE 28
Processor
ARTICLE 29
Processing under the authority of the controller or processor
ARTICLE 30
Records of processing activities
ARTICLE 31
Cooperation with the supervisory authority
ARTICLE 32
Security of processing
ARTICLE 33
Notification of a personal data breach to the supervisory authority
ARTICLE 34
Communication of a personal data breach to the data subject
ARTICLE 35
Data protection impact assessment
ARTICLE 36
Prior consultation
ARTICLE 37
Designation of the data protection officer
ARTICLE 38
Position of the data protection officer
ARTICLE 39
Tasks of the data protection officer
ARTICLE 40
Codes of conduct
ARTICLE 41
Monitoring of approved codes of conduct
ARTICLE 42
Certification
ARTICLE 43
Certification bodies