Section

Section 1

General obligations Article 24 - Responsibility of the controller Article 25 - Data protection by design and by default Article 26 - Joint controllers Article 27 - Representatives of controllers or processors not established in the Union Article 28 - Processor Article 29 - Processing under the authority of the controller or processor Article 30 - Records of processing activities Article 31 - Cooperation with the supervisory authority »

Section 3

Rectification and erasure Article 16 - Right to rectification Article 17 - Right to erasure (‘right to be forgotten’) Article 18 - Right to restriction of processing Article 19 - Notification obligation regarding rectification or erasure of personal data or restriction of processing Article 20 - Right to data portability »