|
|
| | Recitals |
| | Chapter I General provisions (arts. 1-3) |
Entered into force | Article 1 Subject-matter and objectives |
Entered into force | Article 2 Scope |
Entered into force | Article 3 Definitions |
| | Chapter II Principles (arts. 4-11) |
Entered into force | Article 4 Principles relating to processing of personal data |
Entered into force | Article 5 Time-limits for storage and review |
Entered into force | Article 6 Distinction between different categories of data subject |
Entered into force | Article 7 Distinction between personal data and verification of quality of personal data |
Entered into force | Article 8 Lawfulness of processing |
Entered into force | Article 9 Specific processing conditions |
Entered into force | Article 10 Processing of special categories of personal data |
Entered into force | Article 11 Automated individual decision-making |
| | Chapter III Rights of the data subject (arts. 12-18) |
Entered into force | Article 12 Communication and modalities for exercising the rights of the data subject |
Entered into force | Article 13 Information to be made available or given to the data subject |
Entered into force | Article 14 Right of access by the data subject |
Entered into force | Article 15 Limitations to the right of access |
Entered into force | Article 16 Right to rectification or erasure of personal data and restriction of processing |
Entered into force | Article 17 Exercise of rights by the data subject and verification by the supervisory authority |
Entered into force | Article 18 Rights of the data subject in criminal investigations and proceedings |
| | Chapter IV Controller and processor (arts. 19-34) |
| | Section 1 General obligations (arts. 19-28) |
Entered into force | Article 19 Obligations of the controller |
Entered into force | Article 20 Data protection by design and by default |
Entered into force | Article 21 Joint controllers |
Entered into force | Article 22 Processor |
Entered into force | Article 23 Processing under the authority of the controller or processor |
Entered into force | Article 24 Records of processing activities |
Entered into force | Article 25 Logging |
Entered into force | Article 26 Cooperation with the supervisory authority |
Entered into force | Article 27 Data protection impact assessment |
Entered into force | Article 28 Prior consultation of the supervisory authority |
| | Section 2 Security of personal data (arts. 29-31) |
Entered into force | Article 29 Security of processing |
Entered into force | Article 30 Notification of a personal data breach to the supervisory authority |
Entered into force | Article 31 Communication of a personal data breach to the data subject |
| | Section 3 Data protection officer (arts. 32-34) |
Entered into force | Article 32 Designation of the data protection officer |
Entered into force | Article 33 Position of the data protection officer |
Entered into force | Article 34 Tasks of the data protection officer |
| | Chapter V Transfers of personal data to third countries or international organisations (arts. 35-40) |
Entered into force | Article 35 General principles for transfers of personal data |
Entered into force | Article 36 Transfers on the basis of an adequacy decision |
Entered into force | Article 37 Transfers subject to appropriate safeguards |
Entered into force | Article 38 Derogations for specific situations |
Entered into force | Article 39 Transfers of personal data to recipients established in third countries |
Entered into force | Article 40 International cooperation for the protection of personal data |
| | Chapter VI Independent supervisory authorities (arts. 41-49) |
| | Section 1 Independent status (arts. 41-44) |
Entered into force | Article 41 Supervisory authority |
Entered into force | Article 42 Independence |
Entered into force | Article 43 General conditions for the members of the supervisory authority |
Entered into force | Article 44 Rules on the establishment of the supervisory authority |
| | Section 2 Competence, tasks and powers (arts. 45-49) |
Entered into force | Article 45 Competence |
Entered into force | Article 46 Tasks |
Entered into force | Article 47 Powers |
Entered into force | Article 48 Reporting of infringements |
Entered into force | Article 49 Activity reports |
| | Chapter VII Cooperation (arts. 50-51) |
Entered into force | Article 50 Mutual assistance |
Amended | Article 51 Tasks of the Board |
| | Chapter VIII Remedies, liability and penalties (arts. 52-57) |
Entered into force | Article 52 Right to lodge a complaint with a supervisory authority |
Entered into force | Article 53 Right to an effective judicial remedy against a supervisory authority |
Entered into force | Article 54 Right to an effective judicial remedy against a controller or processor |
Entered into force | Article 55 Representation of data subjects |
Entered into force | Article 56 Right to compensation |
Entered into force | Article 57 Penalties |
| | Chapter IX Implementing acts (art. 58) |
Entered into force | Article 58 Committee procedure |
| | Chapter X Final provisions (arts. 59-65) |
Entered into force | Article 59 Repeal of Framework Decision 2008/977/JHA |
Entered into force | Article 60 Union legal acts already in force |
Entered into force | Article 61 Relationship with previously concluded international agreements in the field of judicial cooperation in criminal matters and police cooperation |
Entered into force | Article 62 Commission reports |
Entered into force | Article 63 Transposition |
Entered into force | Article 64 Entry into force |
Entered into force | Article 65 Addressees |
| | Done at |
