Article 25

Notification to the Data Protection Officer 1. The controller shall give prior notice to the Data Protection Officer of any processing operation or set of such operations intended to serve a single purpose or several related purposes. 2. The information to be given shall include: the name and address of the controller and an indication of the organisational parts of an institution or body entrusted with the processing of personal data for a particular purpose; the purpose or purposes of the processing; a description of the category or categories of data subjects and of the data or categories of data relating to them; the legal basis of the processing operation for which the data are intended; the recipients or categories of recipient to whom the data might be disclosed; a general indication of the time limits for blocking and erasure of the different categories of data; proposed transfers of data to third countries or international organisations; a general description allowing a preliminary assessment to be made of the appropriateness of the measures taken pursuant to Article 22 to ensure security of processing. 3. Any change affecting information referred to in paragraph 2 shall be notified promptly to the Data Protection Officer.

← 8. · All articles · art_25__para →

Source: EUR-Lex (Cellar) · retrieved 2026-10-27 · Text as adopted (Official Journal); later amendments are not incorporated in this text.