Regulation (EC) No 45/2001 of the European Parliament and of the Council
of 18 December 2000
on the protection of individuals with regard to the processing of personal data by the Community institutions and bodies and on the free movement of such data (repealed)
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
CHAPTER I

GENERAL PROVISIONS

Object of the Regulation
Article 1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Definitions
Article 2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Scope
Article 3 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
CHAPTER II

GENERAL RULES ON THE LAWFULNESS OF THE PROCESSING OF PERSONAL DATA
SECTION 1

PRINCIPLES RELATING TO DATA QUALITY

Data quality
Article 4 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
SECTION 2

CRITERIA FOR MAKING DATA PROCESSING LEGITIMATE

Lawfulness of processing
Article 5 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Change of purpose
Article 6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Transfer of personal data within or between Community institutions or bodies
Article 7 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Transfer of personal data to recipients, other than Community institutions and bodies, subject to Directive 95/46/EC
Article 8 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Transfer of personal data to recipients, other than Community institutions and bodies, which are not subject to Directive 95/46/EC
Article 9 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
SECTION 3

SPECIAL CATEGORIES OF PROCESSING

The processing of special categories of data
Article 10 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
SECTION 4

INFORMATION TO BE GIVEN TO THE DATA SUBJECT

Information to be supplied where the data have been obtained from the data subject
Article 11 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Information to be supplied where the data have not been obtained from the data subject
Article 12 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
SECTION 5

RIGHTS OF THE DATA SUBJECT

Right of access
Article 13 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Rectification
Article 14 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Blocking
Article 15 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Erasure
Article 16 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Notification to third parties
Article 17 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

The data subject's right to object
Article 18 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Automated individual decisions
Article 19 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
SECTION 6

EXEMPTIONS AND RESTRICTIONS

Exemptions and restrictions
Article 20 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
SECTION 7

CONFIDENTIALITY AND SECURITY OF PROCESSING

Confidentiality of processing
Article 21 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Security of processing
Article 22 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Processing of personal data on behalf of controllers
Article 23 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
SECTION 8

DATA PROTECTION OFFICER

Appointment and tasks of the Data Protection Officer
Article 24 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Notification to the Data Protection Officer
Article 25 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Register
Article 26 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
SECTION 9

PRIOR CHECKING BY THE EUROPEAN DATA PROTECTION SUPERVISOR AND OBLIGATION TO COOPERATE

Prior checking
Article 27 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Consultation
Article 28 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Obligation to provide information
Article 29 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Obligation to cooperate
Article 30 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Obligation to react to allegations
Article 31 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
CHAPTER III

REMEDIES

Remedies
Article 32 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Complaints by Community staff
Article 33 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
CHAPTER IV

PROTECTION OF PERSONAL DATA AND PRIVACY IN THE CONTEXT OF INTERNAL TELECOMMUNICATIONS NETWORKS

Scope
Article 34 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Security
Article 35 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Confidentiality of communications
Article 36 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Traffic and billing data
Article 37 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Directories of users
Article 38 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Presentation and restriction of calling and connected line identification
Article 39 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Derogations
Article 40 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
CHAPTER V

INDEPENDENT SUPERVISORY AUTHORITY: THE EUROPEAN DATA PROTECTION SUPERVISOR

European Data Protection Supervisor
Article 41 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Appointment
Article 42 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Regulations and general conditions governing the performance of the European Data Protection Supervisor's duties, staff and financial resources
Article 43 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Independence
Article 44 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Professional secrecy
Article 45 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Duties
Article 46 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Powers
Article 47 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Activities report
Article 48 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
CHAPTER VI

FINAL PROVISIONS

Sanctions
Article 49 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Transitional period
Article 50 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Entry into force
Article 51 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
ANNEX
1. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
2. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
3. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
4. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
5. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Repealed by Regulation (EU) 2018/1725 of the European Parliament and of the Council of 23 October 2018 on the protection of natural persons with regard to the processing of personal data by the Union institutions, bodies, offices and agencies and on the free movement of such data, and repealing Regulation (EC) No 45/2001 and Decision No 1247/2002/EC (Text with EEA relevance).