Regulation (EU) 2016/679 of the European Parliament and of the CouncilShow full title

1. Introductory TextNext Match

2. CHAPTER I General provisionsPrevious MatchNext Match

   1. Article 1. Subject-matter and objectivesPrevious MatchNext Match

   2. Article 2. Material scopePrevious MatchNext Match

   3. Article 3. Territorial scopePrevious MatchNext Match

   4. Article 4. DefinitionsPrevious MatchNext Match

3. CHAPTER II PrinciplesPrevious MatchNext Match

   1. Article 5. Principles relating to processing of personal dataPrevious MatchNext Match

   2. Article 6. Lawfulness of processingPrevious MatchNext Match

   3. Article 7. Conditions for consentPrevious MatchNext Match

   4. Article 8. Conditions applicable to child's consent in relation to information society servicesPrevious MatchNext Match

   5. Article 9. Processing of special categories of personal dataPrevious MatchNext Match

   6. Article 10. Processing of personal data relating to criminal convictions and offencesPrevious MatchNext Match

   7. Article 11. Processing which does not require identificationPrevious MatchNext Match

4. CHAPTER III Rights of the data subjectPrevious MatchNext Match

   1. Section 1 Transparency and modalitiesPrevious MatchNext Match

      1. Article 12. Transparent information, communication and modalities for the exercise of the rights of the data subjectPrevious MatchNext Match

   2. Section 2 Information and access to personal dataPrevious MatchNext Match

      1. Article 13. Information to be provided where personal data are collected from the data subjectPrevious MatchNext Match

      2. Article 14. Information to be provided where personal data have not been obtained from the data subjectPrevious MatchNext Match

      3. Article 15. Right of access by the data subjectPrevious MatchNext Match

   3. Section 3 Rectification and erasurePrevious MatchNext Match

      1. Article 16. Right to rectificationPrevious MatchNext Match

      2. Article 17. Right to erasure (‘right to be forgotten’)Previous MatchNext Match

      3. Article 18. Right to restriction of processingPrevious MatchNext Match

      4. Article 19. Notification obligation regarding rectification or erasure of personal data or restriction of processingPrevious MatchNext Match

      5. Article 20. Right to data portabilityPrevious MatchNext Match

   4. Section 4 Right to object and automated individual decision-makingPrevious MatchNext Match

      1. Article 21. Right to objectPrevious MatchNext Match

      2. Article 22. Automated individual decision-making, including profilingPrevious MatchNext Match

   5. Section 5 RestrictionsPrevious MatchNext Match

      1. Article 23. RestrictionsPrevious MatchNext Match

5. CHAPTER IV Controller and processorPrevious MatchNext Match

   1. Section 1 General obligationsPrevious MatchNext Match

      1. Article 24. Responsibility of the controllerPrevious MatchNext Match

      2. Article 25. Data protection by design and by defaultPrevious MatchNext Match

      3. Article 26. Joint controllersPrevious MatchNext Match

      4. Article 27. Representatives of controllers or processors not established in the United KingdomPrevious MatchNext Match

      5. Article 28. ProcessorPrevious MatchNext Match

      6. Article 29. Processing under the authority of the controller or processorPrevious MatchNext Match

      7. Article 30. Records of processing activitiesPrevious MatchNext Match

      8. Article 31. Cooperation with the CommissionerPrevious MatchNext Match

   2. Section 2 Security of personal dataPrevious MatchNext Match

      1. Article 32. Security of processingPrevious MatchNext Match

      2. Article 33. Notification of a personal data breach to the CommissionerPrevious MatchNext Match

      3. Article 34. Communication of a personal data breach to the data subjectPrevious MatchNext Match

   3. Section 3 Data protection impact assessment and prior consultationPrevious MatchNext Match

      1. Article 35. Data protection impact assessmentPrevious MatchNext Match

      2. Article 36. Prior consultationPrevious MatchNext Match

   4. Section 4 Data protection officerPrevious MatchNext Match

      1. Article 37. Designation of the data protection officerPrevious MatchNext Match

      2. Article 38. Position of the data protection officerPrevious MatchNext Match

      3. Article 39. Tasks of the data protection officerPrevious MatchNext Match

   5. Section 5 Codes of conduct and certificationPrevious MatchNext Match

      1. Article 40. Codes of conductPrevious MatchNext Match

      2. Article 41. Monitoring of approved codes of conductPrevious MatchNext Match

      3. Article 42. CertificationPrevious MatchNext Match

      4. Article 43. Certification bodiesPrevious MatchNext Match

6. CHAPTER V Transfers of personal data to third countries or international organisationsPrevious MatchNext Match

   1. Article 44. General principle for transfersPrevious MatchNext Match

   2. Article 45. Transfers on the basis of an adequacy decisionPrevious MatchNext Match

   3. Article 46. Transfers subject to appropriate safeguardsPrevious MatchNext Match

   4. Article 47. Binding corporate rulesPrevious MatchNext Match

   5. Article 48. Transfers or disclosures not authorised by Union lawPrevious MatchNext Match

   6. Article 49. Derogations for specific situationsPrevious MatchNext Match

   7. Article 50. International cooperation for the protection of personal dataPrevious MatchNext Match

7. CHAPTER VI The CommissionerPrevious MatchNext Match

   1. Section 1 Independent statusPrevious MatchNext Match

      1. Article 51. Monitoring the application of this RegulationPrevious MatchNext Match

      2. Article 52. IndependencePrevious MatchNext Match

      3. Article 53. General conditions for the members of the supervisory authorityPrevious MatchNext Match

      4. Article 54. Rules on the establishment of the supervisory authorityPrevious MatchNext Match

   2. Section 2 Tasks and powersPrevious MatchNext Match

      1. Article 55. CompetencePrevious MatchNext Match

      2. Article 56. Competence of the lead supervisory authorityPrevious MatchNext Match

      3. Article 57. TasksPrevious MatchNext Match

      4. Article 58. PowersPrevious MatchNext Match

      5. Article 59. Activity reportsPrevious MatchNext Match

8. CHAPTER VII Cooperation and consistencyPrevious MatchNext Match

   1. Section 1 CooperationPrevious MatchNext Match

      1. Article 60. Cooperation between the lead supervisory authority and the other supervisory authorities concernedPrevious MatchNext Match

      2. Article 61. Mutual assistancePrevious MatchNext Match

      3. Article 62. Joint operations of supervisory authoritiesPrevious MatchNext Match

   2. Section 2 ConsistencyPrevious MatchNext Match

      1. Article 63. Consistency mechanismPrevious MatchNext Match

      2. Article 64. Opinion of the BoardPrevious MatchNext Match

      3. Article 65. Dispute resolution by the BoardPrevious MatchNext Match

      4. Article 66. Urgency procedurePrevious MatchNext Match

      5. Article 67. Exchange of informationPrevious MatchNext Match

   3. Section 3 European data protection boardPrevious MatchNext Match

      1. Article 68. European Data Protection BoardPrevious MatchNext Match

      2. Article 69. IndependencePrevious MatchNext Match

      3. Article 70. Tasks of the BoardPrevious MatchNext Match

      4. Article 71. ReportsPrevious MatchNext Match

      5. Article 72. ProcedurePrevious MatchNext Match

      6. Article 73. ChairPrevious MatchNext Match

      7. Article 74. Tasks of the ChairPrevious MatchNext Match

      8. Article 75. SecretariatPrevious MatchNext Match

      9. Article 76. ConfidentialityPrevious MatchNext Match

9. CHAPTER VIII Remedies, liability and penaltiesPrevious MatchNext Match

   1. Article 77. Right to lodge a complaint with the CommissionerPrevious MatchNext Match

   2. Article 78. Right to an effective judicial remedy against the CommissionerPrevious MatchNext Match

   3. Article 79. Right to an effective judicial remedy against a controller or processorPrevious MatchNext Match

   4. Article 80. Representation of data subjectsPrevious MatchNext Match

   5. Article 81. Suspension of proceedingsPrevious MatchNext Match

   6. Article 82. Right to compensation and liabilityPrevious MatchNext Match

   7. Article 83. General conditions for imposing administrative finesPrevious MatchNext Match

   8. Article 84. PenaltiesPrevious MatchNext Match

10. CHAPTER IX Provisions relating to specific processing situationsPrevious MatchNext Match

    1. Article 85. Processing and freedom of expression and informationPrevious MatchNext Match

    2. Article 86. Processing and public access to official documentsPrevious MatchNext Match

    3. Article 86A. Processing and national security and defencePrevious MatchNext Match

    4. Article 87. Processing of the national identification numberPrevious MatchNext Match

    5. Article 88. Processing in the context of employmentPrevious MatchNext Match

    6. Article 89. Safeguards and derogations relating to processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposesPrevious MatchNext Match

    7. Article 90. Obligations of secrecyPrevious MatchNext Match

    8. Article 91. Existing data protection rules of churches and religious associationsPrevious MatchNext Match

11. CHAPTER X Delegated acts and implementing actsPrevious MatchNext Match

    1. Article 92. Exercise of the delegationPrevious MatchNext Match

    2. Article 93. Committee procedurePrevious MatchNext Match

12. CHAPTER XI Final provisionsPrevious MatchNext Match

    1. Article 94. Repeal of Directive 95/46/ECPrevious MatchNext Match

    2. Article 95. Relationship with domestic law made before IP completion day implementing Directive 2002/58/EC of the European Parliament and of the Council of 12th July 2002 concerning the processing of personal data and the protection of privacy in the electronic communications sectorPrevious MatchNext Match

    3. Article 96. Relationship with previously concluded AgreementsPrevious MatchNext Match

    4. Article 97. Commission reportsPrevious MatchNext Match

    5. Article 98. Review of other Union legal acts on data protectionPrevious MatchNext Match

    6. Article 99. Entry into force and applicationPrevious MatchNext Match

13. Signature Previous MatchNext Match