Search the GDPR Regulation
General Provisions
GDPR Principles
- Article 5: Principles relating to processing of personal data
- Article 6: Lawfulness of processing
- Article 7: Conditions for consent
- Article 8 : Conditions applicable to child's consent in relation to information society services
- Article 9: Processing of special categories of personal data
- Article 10: Processing of personal data relating to criminal convictions and offences
- Article 11: Processing which does not require identification
Rights of the Data Subject
Controller and processor
-
Section 1 : General Obligations
- Article 24 : Responsibility of the controller
- Article 25 : Data protection by design and by default
- Article 26 Joint controllers
- Article 27 : Representatives of controllers or processors not established in the Union
- Article 28 : Processor
- Article 29 : Processing under the authority of the controller or processor
- Article 30 : Records of processing activities
- Article 31 : Cooperation with the supervisory authority
- Section 2 : Security of personal data
- Section 3 : Data protection impact assessment and prior consultation
- Section 4 Data protection officer
- Section 5 Codes of conduct and certification
Transfers of personal data to third countries or international organisations
- Article 44 - General principle for transfers
- Article 45 - Transfers on the basis of an adequacy decision
- Article 46 - Transfers subject to appropriate safeguards
- Article 47 - Binding corporate rules
- Article 48 Transfers or disclosures not authorised by Union law
- Article 49 - Derogations for specific situations
- Article 50 - International cooperation for the protection of personal data
Independent supervisory authorities
Cooperation and consistency
Remedies, liability and penalties
- Article 77 Right to lodge a complaint with a supervisory authority
- Article 78 Right to an effective judicial remedy against a supervisory authority
- Article 79 Right to an effective judicial remedy against a controller or processor
- Article 80 Representation of data subjects
- Article 81 Suspension of proceedings
- Article 82 Right to compensation and liability
- Article 83 General conditions for imposing administrative fines
- Article 84 Penalties
Provisions relating to specific processing situations
- Article 85 Processing and freedom of expression and information
- Article 86 Processing and public access to official documents
- Article 87 Processing of the national identification number
- Article 88 Processing in the context of employment
- Article 89 Safeguards and derogations relating to processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes
- Article 90 Obligations of secrecy
- Article 91 Existing data protection rules of churches and religious associations
Delegated acts and implementing acts
Final provisions
- Article 24 : Responsibility of the controller
- Article 25 : Data protection by design and by default
- Article 26 Joint controllers
- Article 27 : Representatives of controllers or processors not established in the Union
- Article 28 : Processor
- Article 29 : Processing under the authority of the controller or processor
- Article 30 : Records of processing activities
- Article 31 : Cooperation with the supervisory authority