rec_51

(51) Both Regulations (EU) 2016/679 Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ L 119, 4.5.2016, p. 1). and (EU) 2018/1725 Regulation (EU) 2018/1725 of the European Parliament and of the Council of 23 October 2018 on the protection of natural persons with regard to the processing of personal data by the Union institutions, bodies, offices and agencies and on the free movement of such data, and repealing Regulation (EC) No 45/2001 and Decision No 1247/2002/EC (OJ L 295, 21.11.2018, p. 39). of the European Parliament and of the Council apply to the processing of personal data for the purposes of this Directive. In particular, where personal data is processed for the purposes of this Directive, the precise purpose should be specified, the relevant legal basis referred to, the relevant security requirements laid down in Regulation (EU) 2016/679 complied with, and the principles of necessity, proportionality, purpose limitation, and transparent and proportionate data retention period respected. For those purposes, an industry-wide code of conduct, in accordance with Article 40 of Regulation (EU) 2016/679, is preferred. Also, personal data protection by design and data protection by default should be embedded in all data processing systems developed and used within the framework of this Directive. Equally, administrative cooperation and mutual assistance between the competent authorities of the Member States should be compatible with the rules on the protection of personal data laid down in Regulation (EU) 2016/679, and in accordance with national data protection rules implementing Union law.

← rec_50 · All articles · rec_52 →

Source: EUR-Lex (Cellar) · retrieved 2026-10-12 · Text as adopted (Official Journal); later amendments are not incorporated in this text.