Text with EEA relevance. — Regulation (EU) 2018/1725 of the European Parliament and of…

Text with EEA relevance. — Regulation (EU) 2018/1725 of the European Parliament and of the Council of 23 October 2018 on the protection of natural persons with regard to the processing of personal data by the Union institutions, bodies, offices and agencies and on the free movement of such data, and repealing Regulation (EC) No 45/2001 and Decision No 1247/2002/EC (Text with EEA relevance.)

regulation · European Union · 32018R1725

719 provisions in 1489 nodes · cited by 1 instruments we hold

Defined terms · All instruments · Internet · Unfair contract terms · broadcasting · cartel · civil law · competition · computer science · confidentiality

CHAPTER I GENERAL PROVISIONS

Article 1 Subject matter and objectives

Division

Article 2 Scope

Division

Article 3 Definitions

CHAPTER II GENERAL PRINCIPLES

Article 4 Principles relating to processing of personal data

Article 5 Lawfulness of processing

Article 6 Processing for another compatible purpose

Article 7 Conditions for consent

Division

Article 8 Conditions applicable to a child’s consent in relation to information society services

Division

Article 9 Transmissions of personal data to recipients established in the Union other than Union institutions and bodies

Article 10 Processing of special categories of personal data

Article 11 Processing of personal data relating to criminal convictions and offences

Division

Article 12 Processing which does not require identification

Division

Article 13 Safeguards relating to processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes

Division

CHAPTER III RIGHTS OF THE DATA SUBJECT

SECTION 1 Transparency and modalities

Article 14 Transparent information, communication and modalities for the exercise of the rights of the data subject

Division

SECTION 2 Information and access to personal data

Article 15 Information to be provided where personal data are collected from the data subject

Article 16 Information to be provided where personal data have not been obtained from the data subject

Article 17 Right of access by the data subject

SECTION 3 Rectification and erasure

Article 18 Right to rectification

Division

Article 19 Right to erasure (‘right to be forgotten’)

Article 20 Right to restriction of processing

Article 21 Notification obligation regarding rectification or erasure of personal data or restriction of processing

Division

Article 22 Right to data portability

SECTION 4 Right to object and automated individual decision-making

Article 23 Right to object

Division

Article 24 Automated individual decision-making, including profiling

SECTION 5 Restrictions

Article 25 Restrictions

CHAPTER IV CONTROLLER AND PROCESSOR

SECTION 1 General obligations

Article 26 Responsibility of the controller

Division

Article 27 Data protection by design and by default

Division

Article 28 Joint controllers

Article 30 Processing under the authority of the controller or processor

Division

Article 31 Records of processing activities

Article 32 Cooperation with the European Data Protection Supervisor

Division

SECTION 2 Security of personal data

Article 33 Security of processing

Article 34 Notification of a personal data breach to the European Data Protection Supervisor

Article 35 Communication of a personal data breach to the data subject

SECTION 3 Confidentiality of electronic communications

Article 36 Confidentiality of electronic communications

Division

Article 37 Protection of information transmitted to, stored in, related to, processed by and collected from users’ terminal equipment

Division

Article 38 Directories of users

Division

SECTION 4 Data protection impact assessment and prior consultation

Article 39 Data protection impact assessment

Article 40 Prior consultation

SECTION 5 Information and legislative consultation

Article 41 Information and consultation

Division

Article 42 Legislative consultation

Division

SECTION 6 Data protection officer

Article 43 Designation of the data protection officer

Division

Article 44 Position of the data protection officer

Division

Article 45 Tasks of the data protection officer

CHAPTER V TRANSFERS OF PERSONAL DATA TO THIRD COUNTRIES OR INTERNATIONAL ORGANISATIONS

Article 46 General principle for transfers

Division

Article 47 Transfers on the basis of an adequacy decision

Division

Article 48 Transfers subject to appropriate safeguards

Article 49 Transfers or disclosures not authorised by Union law

Division

Article 50 Derogations for specific situations

Article 51 International cooperation for the protection of personal data

CHAPTER VI EUROPEAN DATA PROTECTION SUPERVISOR

Article 52 European Data Protection Supervisor

Division

Article 53 Appointment of the European Data Protection Supervisor

Article 54 Regulations and general conditions governing the performance of the European Data Protection Supervisor’s duties, staff and financial resources

Division

Article 55 Independence

Division

Article 56 Professional secrecy

Article 59 Obligation of controllers and processors to react to allegations

Division

Article 60 Activities report

Division

CHAPTER VII COOPERATION AND CONSISTENCY

Article 61 Cooperation between the European Data Protection Supervisor and national supervisory authorities

Division

Article 62 Coordinated supervision by the European Data Protection Supervisor and national supervisory authorities

Division

CHAPTER VIII REMEDIES, LIABILITY AND PENALTIES

Article 63 Right to lodge a complaint with the European Data Protection Supervisor

Division

Article 64 Right to an effective judicial remedy

Division

Article 65 Right to compensation

Division

Article 66 Administrative fines

Article 67 Representation of data subjects

Division

Article 68 Complaints by Union staff

Division

Article 69 Sanctions

Division

CHAPTER IX PROCESSING OF OPERATIONAL PERSONAL DATA BY UNION BODIES, OFFICES AND AGENCIES WHEN CARRYING OUT ACTIVITIES WHICH FALL WITHIN THE SCOPE OF CHAPTER 4 OR CHAPTER 5 OF TITLE V OF PART THREE TFEU

Article 70 Scope of the Chapter

Division

Article 71 Principles relating to processing of operational personal data

Article 72 Lawfulness of processing of operational personal data

Division

Article 73 Distinction between different categories of data subjects

Division

Article 74 Distinction between operational personal data and verification of the quality of operational personal data

Division

Article 75 Specific processing conditions

Division

Article 76 Processing of special categories of operational personal data

Division

Article 77 Automated individual decision-making, including profiling

Division

Article 78 Communication and modalities for exercising the rights of the data subject

Division

Article 79 Information to be made available or given to the data subject

Article 80 Right of access by the data subject

Article 81 Limitations to the right of access

Article 82 Right to rectification or erasure of operational personal data and restriction of processing

Article 83 Right of access in criminal investigations and proceedings

Division

Article 84 Exercise of rights by the data subject and verification by the European Data Protection Supervisor

Division

Article 85 Data protection by design and by default

Division

Article 86 Joint controllers

Article 89 Data protection impact assessment

Division

Article 90 Prior consultation of the European Data Protection Supervisor

Article 91 Security of processing of operational personal data

Article 92 Notification of a personal data breach to the European Data Protection Supervisor

Article 93 Communication of a personal data breach to the data subject

Article 94 Transfer of operational personal data to third countries and international organisations

Article 95 Secrecy of judicial inquiries and criminal proceedings

Division

CHAPTER X IMPLEMENTING ACTS

Article 96 Committee procedure

Division

CHAPTER XI REVIEW

Article 97 Review clause

Division

Article 98 Review of Union legal acts

CHAPTER XII FINAL PROVISIONS

Article 99 Repeal of Regulation (EC) No 45/2001 and of Decision No 1247/2002/EC

Division

Article 100 Transitional measures

Division

Article 101 Entry into force and application

Division

Preamble