General Data Protection Regulation
Table of Contents
Chapter 1
General Provisions
Chapter 2
Principles
Article 5
Principles relating to processing of personal data
Article 6
Lawfulness of processing
Article 7
Conditions for consent
Article 8
Conditions applicable to child's consent in relation to information society services
Article 9
Processing of special categories of personal data
Article 10
Processing of personal data relating to criminal convictions and offences
Article 11
Processing which does not require identification
Chapter 3
Rights of the data subject
Chapter 4
Controller and processor
Section 1
General obligations
Article 24
Responsibility of the controller
Article 25
Data protection by design and by default
Article 26
Joint controllers
Article 27
Representatives of controllers or processors not established in the Union
Article 28
Processor
Article 29
Processing under the authority of the controller or processor
Article 30
Records of processing activities
Article 31
Cooperation with the supervisory authority
Section 2
Security of personal data
Section 3
Data protection impact assessment and prior consultation
Section 4
Data protection officer
Section 5
Codes of conduct and certification
Chapter 5
Transfers of personal data to third countries or international organisations
Article 44
General principle for transfers
Article 45
Transfers on the basis of an adequacy decision
Article 46
Transfers subject to appropriate safeguards
Article 47
Binding corporate rules
Article 48
Transfers or disclosures not authorised by Union law
Article 49
Derogations for specific situations
Article 50
International cooperation for the protection of personal data
Chapter 6
Independent supervisory authorities
Chapter 7
Cooperation and consistency
Chapter 8
Remedies, liability and penalties
Article 77
Right to lodge a complaint with a supervisory authority
Article 78
Right to an effective judicial remedy against a supervisory authority
Article 79
Right to an effective judicial remedy against a controller or processor
Article 80
Representation of data subjects
Article 81
Suspension of proceedings
Article 82
Right to compensation and liability
Article 83
General conditions for imposing administrative fines
Article 84
Penalties
Chapter 9
Provisions relating to specific processing situations
Article 85
Processing and freedom of expression and information
Article 86
Processing and public access to official documents
Article 87
Processing of the national identification number
Article 88
Processing in the context of employment
Article 89
Safeguards and derogations relating to processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes
Article 90
Obligations of secrecy
Article 91
Existing data protection rules of churches and religious associations
Chapter 10
Delegated acts and implementing acts
Chapter 11
Final provisions
Official GDPR Summary
Article 98
The Commission shall, if appropriate, submit legislative proposals with a view to amending other Union legal acts on the protection of personal data, in order to ensure uniform and consistent protection of natural persons with regard to processing. This shall in particular concern the rules relating to the protection of natural persons with regard to processing by Union institutions, bodies, offices and agencies and on the free movement of such data.