http://www.legislation.gov.uk/eur/2001/45/bodyRegulation (EC) No 45/2001 of the European Parliament and of the Council of 18 December 2000 on the protection of individuals with regard to the processing of personal data by the Community institutions and bodies and on the free movement of such data (repealed)Regulation (EC) No 45/2001 of the European Parliament and of the Council (repealed)Regulation (EC) No 45/2001 of the European Parliament and of the Council of 18 December 2000 on the protection of individuals with regard to the processing of personal data by the Community institutions and bodies and on the free movement of such data (repealed)2020-12-12King's Printer of Acts of Parliamenthttps://webarchive.nationalarchives.gov.uk/eu-exit/https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02001R0045-20181211texttext/xmlen2018-12-11 CHAPTER I GENERAL PROVISIONS Object of the Regulation Article 1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Definitions Article 2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Scope Article 3 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . CHAPTER II GENERAL RULES ON THE LAWFULNESS OF THE PROCESSING OF PERSONAL DATA SECTION 1 PRINCIPLES RELATING TO DATA QUALITY Data quality Article 4 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . SECTION 2 CRITERIA FOR MAKING DATA PROCESSING LEGITIMATE Lawfulness of processing Article 5 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Change of purpose Article 6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Transfer of personal data within or between Community institutions or bodies Article 7 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Transfer of personal data to recipients, other than Community institutions and bodies, subject to Directive 95/46/EC Article 8 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Transfer of personal data to recipients, other than Community institutions and bodies, which are not subject to Directive 95/46/EC Article 9 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . SECTION 3 SPECIAL CATEGORIES OF PROCESSING The processing of special categories of data Article 10 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . SECTION 4 INFORMATION TO BE GIVEN TO THE DATA SUBJECT Information to be supplied where the data have been obtained from the data subject Article 11 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Information to be supplied where the data have not been obtained from the data subject Article 12 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . SECTION 5 RIGHTS OF THE DATA SUBJECT Right of access Article 13 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Rectification Article 14 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Blocking Article 15 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Erasure Article 16 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Notification to third parties Article 17 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . The data subject's right to object Article 18 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Automated individual decisions Article 19 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . SECTION 6 EXEMPTIONS AND RESTRICTIONS Exemptions and restrictions Article 20 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . SECTION 7 CONFIDENTIALITY AND SECURITY OF PROCESSING Confidentiality of processing Article 21 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Security of processing Article 22 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Processing of personal data on behalf of controllers Article 23 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . SECTION 8 DATA PROTECTION OFFICER Appointment and tasks of the Data Protection Officer Article 24 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Notification to the Data Protection Officer Article 25 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Register Article 26 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . SECTION 9 PRIOR CHECKING BY THE EUROPEAN DATA PROTECTION SUPERVISOR AND OBLIGATION TO COOPERATE Prior checking Article 27 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Consultation Article 28 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Obligation to provide information Article 29 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Obligation to cooperate Article 30 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Obligation to react to allegations Article 31 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . CHAPTER III REMEDIES Remedies Article 32 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Complaints by Community staff Article 33 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . CHAPTER IV PROTECTION OF PERSONAL DATA AND PRIVACY IN THE CONTEXT OF INTERNAL TELECOMMUNICATIONS NETWORKS Scope Article 34 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Security Article 35 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Confidentiality of communications Article 36 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Traffic and billing data Article 37 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Directories of users Article 38 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Presentation and restriction of calling and connected line identification Article 39 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Derogations Article 40 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . CHAPTER V INDEPENDENT SUPERVISORY AUTHORITY: THE EUROPEAN DATA PROTECTION SUPERVISOR European Data Protection Supervisor Article 41 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Appointment Article 42 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Regulations and general conditions governing the performance of the European Data Protection Supervisor's duties, staff and financial resources Article 43 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Independence Article 44 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Professional secrecy Article 45 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Duties Article 46 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Powers Article 47 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Activities report Article 48 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . CHAPTER VI FINAL PROVISIONS Sanctions Article 49 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Transitional period Article 50 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Entry into force Article 51 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Repealed by Regulation (EU) 2018/1725 of the European Parliament and of the Council of 23 October 2018 on the protection of natural persons with regard to the processing of personal data by the Union institutions, bodies, offices and agencies and on the free movement of such data, and repealing Regulation (EC) No 45/2001 and Decision No 1247/2002/EC (Text with EEA relevance).