Version status: Repealed | Document consolidation status: Updated to reflect all known changes

Published date: 1 February 2001

Regulation (EC) No 45/2001 of the European Parliament and of the Council of 18 December 2000 on the protection of individuals with regard to the processing of personal data by the Community institutions and bodies and on the free movement of such data

	Recitals
	Chapter I General Provisions (arts. 1-3)
	Article 1 Object of the Regulation
	Article 2 Definitions
	Article 3 Scope
	Chapter II General rules on the lawfulness of the processing of personal data (arts. 4-31)
	Section 1 Principles relating to data quality (art. 4)
	Article 4 Data quality
	Section 2 Criteria for making data processing legitimate (arts. 5-9)
	Article 5 Lawfulness of processing
	Article 6 Change of purpose
	Article 7 Transfer of personal data within or between Community institutions or bodies
	Article 8 Transfer of personal data to recipients, other than Community institutions and bodies, subject to Directive 95/46/EC
	Article 9 Transfer of personal data to recipients, other than Community institutions and bodies, which are not subject to Directive 95/46/EC
	Section 3 Special categories of processing (art. 10)
	Article 10 The processing of special categories of data
	Section 4 Information to be given to the data subject (arts. 11-12)
	Article 11 Information to be supplied where the data have been obtained from the data subject
	Article 12 Information to be supplied where the data have not been obtained from the data subject
	Section 5 Rights of the data subject (arts. 13-19)
	Article 13 Right of access
	Article 14 Rectification
	Article 15 Blocking
	Article 16 Erasure
	Article 17 Notification to third parties
	Article 18 The data subject's right to object
	Article 19 Automated individual decisions
	Section 6 Exemptions and restrictions (art. 20)
	Article 20 Exemptions and restrictions
	Section 7 Confidentiality and security of processing (arts. 21-23)
	Article 21 Confidentiality of processing
	Article 22 Security of processing
	Article 23 Processing of personal data on behalf of controllers
	Section 8 Data Protection Officer (arts. 24-26)
	Article 24 Appointment and tasks of the Data Protection Officer
	Article 25 Notification to the Data Protection Officer
	Article 26 Register
	Section 9 Prior checking by the European Data Protection Supervisor and obligation to cooperate (arts. 27-31)
	Article 27 Prior checking
	Article 28 Consultation
	Article 29 Obligation to provide information
	Article 30 Obligation to cooperate
	Article 31 Obligation to react to allegations
	Chapter III Remedies (arts. 32-33)
	Article 32 Remedies
	Article 33 Complaints by Community staff
	Chapter IV Protection of personal data and privacy in the context of internal telecommunications networks (arts. 34-40)
	Article 34 Scope
	Article 35 Security
	Article 36 Confidentiality of communications
	Article 37 Traffic and billing data
	Article 38 Directories of users
	Article 39 Presentation and restriction of calling and connected line identification
	Article 40 Derogations
	Chapter V Independent supervisory authority: the European Data Protection Supervisor (arts. 41-48)
	Article 41 European Data Protection Supervisor
	Article 42 Appointment
	Article 43 Regulations and general conditions governing the performance of the European Data Protection Supervisor's duties, staff and financial resources
	Article 44 Independence
	Article 45 Professional secrecy
	Article 46 Duties
	Article 47 Powers
	Article 48 Activities report
	Chapter VI Final provisions (arts. 49-51)
	Article 49 Sanctions
	Article 50 Transitional period
	Article 51 Entry into force
	Annex
	Done at