General Data Protection Regulation
CHAPTER I — General provisions
CHAPTER II — Principles
- Art. 5Principles relating to processing of personal data(16)
- Art. 6Lawfulness of processing(22)
- Art. 7Conditions for consent
- Art. 8Conditions applicable to child's consent in relation to information society services
- Art. 9Processing of special categories of personal data(7)
- Art. 10Processing of personal data relating to criminal convictions and offences(2)
- Art. 11Processing which does not require identification
CHAPTER III — Rights of the data subject
- Art. 12Transparent information, communication and modalities for the exercise of the rights of the data subject(4)
- Art. 13Information to be provided where personal data are collected from the data subject(2)
- Art. 14Information to be provided where personal data have not been obtained from the data subject(2)
- Art. 15Right of access by the data subject(8)
- Art. 16Right to rectification(1)
- Art. 17Right to erasure ('right to be forgotten')(7)
- Art. 18Right to restriction of processing(1)
- Art. 19Notification obligation regarding rectification or erasure of personal data or restriction of processing
- Art. 20Right to data portability
- Art. 21Right to object(2)
- Art. 22Automated individual decision-making, including profiling(1)
- Art. 23Restrictions(3)
CHAPTER IV — Controller and processor
- Art. 24Responsibility of the controller(4)
- Art. 25Data protection by design and by default(1)
- Art. 26Joint controllers(5)
- Art. 27Representatives of controllers or processors not established in the Union
- Art. 28Processor
- Art. 29Processing under the authority of the controller or processor(1)
- Art. 30Records of processing activities(1)
- Art. 31Cooperation with the supervisory authority
- Art. 32Security of processing(5)
- Art. 33Notification of a personal data breach to the supervisory authority
- Art. 34Communication of a personal data breach to the data subject
- Art. 35Data protection impact assessment
- Art. 36Prior consultation
- Art. 37Designation of the data protection officer
- Art. 38Position of the data protection officer(3)
- Art. 39Tasks of the data protection officer
- Art. 40Codes of conduct
- Art. 41Monitoring of approved codes of conduct
- Art. 42Certification
- Art. 43Certification bodies
CHAPTER V — Transfers of personal data to third countries or international organisations
- Art. 44General principle for transfers
- Art. 45Transfers on the basis of an adequacy decision(1)
- Art. 46Transfers subject to appropriate safeguards(1)
- Art. 47Binding corporate rules
- Art. 48Transfers or disclosures not authorised by Union law
- Art. 49Derogations for specific situations
- Art. 50International cooperation for the protection of personal data
CHAPTER VI — Independent supervisory authorities
- Art. 51Supervisory authority(2)
- Art. 52Independence
- Art. 53General conditions for the members of the supervisory authority
- Art. 54Rules on the establishment of the supervisory authority
- Art. 55Competence(3)
- Art. 56Competence of the lead supervisory authority(1)
- Art. 57Tasks(3)
- Art. 58Powers(7)
- Art. 59Activity reports
CHAPTER VII — Cooperation and consistency
- Art. 60Cooperation between the lead supervisory authority and the other supervisory authorities concerned(1)
- Art. 61Mutual assistance(1)
- Art. 62Joint operations of supervisory authorities(1)
- Art. 63Consistency mechanism(1)
- Art. 64Opinion of the Board(1)
- Art. 65Dispute resolution by the Board(1)
- Art. 66Urgency procedure(1)
- Art. 67Exchange of information(1)
- Art. 68European Data Protection Board(1)
- Art. 69Independence
- Art. 70Tasks of the Board
- Art. 71Reports
- Art. 72Procedure
- Art. 73Chair
- Art. 74Tasks of the Chair
- Art. 75Secretariat
- Art. 76Confidentiality
CHAPTER VIII — Remedies, liability and penalties
- Art. 77Right to lodge a complaint with a supervisory authority(5)
- Art. 78Right to an effective judicial remedy against a supervisory authority(2)
- Art. 79Right to an effective judicial remedy against a controller or processor(2)
- Art. 80Representation of data subjects(2)
- Art. 81Suspension of proceedings
- Art. 82Right to compensation and liability(12)
- Art. 83General conditions for imposing administrative fines(5)
- Art. 84Penalties
CHAPTER IX — Provisions relating to specific processing situations
- Art. 85Processing and freedom of expression and information
- Art. 86Processing and public access to official documents(1)
- Art. 87Processing of the national identification number
- Art. 88Processing in the context of employment(2)
- Art. 89Safeguards and derogations relating to processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes
- Art. 90Obligations of secrecy
- Art. 91Existing data protection rules of churches and religious associations