lexiara

GDPR — REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (Text with EEA relevance)

regulation · European Union · 32016R0679

471 provisions · cited by 62 instruments we hold · 14 provisions hand work to national law

Defined terms · All instruments · access to information · area of freedom, security and justice · civil law · contract · credit · cross-frontier data flow · damage · data processing

1 Subject-matter and objectives
1
2
3
2 Material scope
1
2
3
4
3 Territorial scope
1
2
3
4 Definitions
5 Principles relating to processing of personal data
1
2
6 Lawfulness of processing
1
2
3
4
7 Conditions for consent
1
2
3
4
8 Conditions applicable to child's consent in relation to information society services
1
2
3
9 Processing of special categories of personal data
1
2
3
4
10 Processing of personal data relating to criminal convictions and offences
11 Processing which does not require identification
1
2
12 Transparent information, communication and modalities for the exercise of the rights of the data subject
1
2
3
4
5
6
7
8
13 Information to be provided where personal data are collected from the data subject
1
2
3
4
14 Information to be provided where personal data have not been obtained from the data subject
1
2
3
4
5
15 Right of access by the data subject
1
2
3
4
16 Right to rectification
17 Right to erasure (‘right to be forgotten’)
1
2
3
18 Right to restriction of processing
1
2
3
19 Notification obligation regarding rectification or erasure of personal data or restriction of processing
20 Right to data portability
1
2
3
4
21 Right to object
1
2
3
4
5
6
22 Automated individual decision-making, including profiling
1
2
3
4
23 Restrictions
1
2
24 Responsibility of the controller
1
2
3
25 Data protection by design and by default
1
2
3
26 Joint controllers
1
2
3
27 Representatives of controllers or processors not established in the Union
1
2
3
4
5
28 Processor
1
2
3
4
5
6
7
8
9
10
29 Processing under the authority of the controller or processor
30 Records of processing activities
1
2
3
4
5
31 Cooperation with the supervisory authority
32 Security of processing
1
2
3
4
33 Notification of a personal data breach to the supervisory authority
1
2
3
4
5
34 Communication of a personal data breach to the data subject
1
2
3
4
35 Data protection impact assessment
1
2
3
4
5
6
7
8
9
10
11
36 Prior consultation
1
2
3
4
5
37 Designation of the data protection officer
1
2
3
4
5
6
7
38 Position of the data protection officer
1
2
3
4
5
6
39 Tasks of the data protection officer
1
2
40 Codes of conduct
1
2
3
4
5
6
7
8
9
10
11
41 Monitoring of approved codes of conduct
1
2
3
4
5
6
42 Certification
1
2
3
4
5
6
7
8
43 Certification bodies
1
2
3
4
5
6
7
8
9
44 General principle for transfers
45 Transfers on the basis of an adequacy decision
1
2
3
4
5
6
7
8
9
46 Transfers subject to appropriate safeguards
1
2
3
4
5
47 Binding corporate rules
1
2
3
48 Transfers or disclosures not authorised by Union law
49 Derogations for specific situations
1
2
3
4
5
6
50 International cooperation for the protection of personal data
51 Supervisory authority
1
2
3
4
52 Independence
1
2
3
4
5
6
53 General conditions for the members of the supervisory authority
1
2
3
4
54 Rules on the establishment of the supervisory authority
1
2
55 Competence
1
2
3
56 Competence of the lead supervisory authority
1
2
3
4
5
6
57 Tasks
1
2
3
4
58 Powers
1
2
3
4
5
6
59 Activity reports
60 Cooperation between the lead supervisory authority and the other supervisory authorities concerned
1
2
3
4
5
6
7
8
9
10
11
12
61 Mutual assistance
1
2
3
4
5
6
7
8
9
62 Joint operations of supervisory authorities
1
2
3
4
5
6
7
63 Consistency mechanism
64 Opinion of the Board
1
2
3
4
5
6
7
8
65 Dispute resolution by the Board
1
2
3
4
5
6
66 Urgency procedure
1
2
3
4
67 Exchange of information
68 European Data Protection Board
1
2
3
4
5
6
69 Independence
1
2
70 Tasks of the Board
1
2
3
4
71 Reports
1
2
72 Procedure
1
2
73 Chair
1
2
74 Tasks of the Chair
1
2
75 Secretariat
1
2
3
4
5
6
76 Confidentiality
1
2
77 Right to lodge a complaint with a supervisory authority
1
2
78 Right to an effective judicial remedy against a supervisory authority
1
2
3
4
79 Right to an effective judicial remedy against a controller or processor
1
2
80 Representation of data subjects
1
2
81 Suspension of proceedings
1
2
3
82 Right to compensation and liability
1
2
3
4
5
6
83 General conditions for imposing administrative fines
1
2
3
4
5
6
7
8
9
84 Penalties
1
2
85 Processing and freedom of expression and information
1
2
3
86 Processing and public access to official documents
87 Processing of the national identification number
88 Processing in the context of employment
1
2
3
89 Safeguards and derogations relating to processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes
1
2
3
4
90 Obligations of secrecy
1
2
91 Existing data protection rules of churches and religious associations
1
2
92 Exercise of the delegation
1
2
3
4
5
93 Committee procedure
1
2
3
94 Repeal of Directive 95/46/EC
1
2
95 Relationship with Directive 2002/58/EC
96 Relationship with previously concluded Agreements
97 Commission reports
1
2
3
4
5
98 Review of other Union legal acts on data protection
99 Entry into force and application
1
2