|
|
Section 1 General obligations (arts. 26-32) |
|
|
Article 26 Responsibility of the controller |
|
|
Article 27 Data protection by design and by default |
|
|
Article 28 Joint controllers |
|
|
Article 29 Processor |
|
|
Article 30 Processing under the authority of the controller or processor |
|
|
Article 31 Records of processing activities |
|
|
Article 32 Cooperation with the European Data Protection Supervisor |
|
|
Section 2 Security of personal data (arts. 33-35) |
|
|
Article 33 Security of processing |
|
|
Article 34 Notification of a personal data breach to the European Data Protection Supervisor |
|
|
Article 35 Communication of a personal data breach to the data subject |
|
|
Section 3 Confidentiality of electronic communications (arts. 36-38) |
|
|
Article 36 Confidentiality of electronic communications |
|
|
Article 37 Protection of information transmitted to, stored in, related to, processed by and collected from users' terminal equipment |
|
|
Article 38 Directories of users |
|
|
Section 4 Data protection impact assessment and prior consultation (arts. 39-40) |
|
|
Article 39 Data protection impact assessment |
|
|
Article 40 Prior consultation |
|
|
Section 5 Information and legislative consultation (arts. 41-42) |
|
|
Article 41 Information and consultation |
|
|
Article 42 Legislative consultation |
|
|
Section 6 Data protection officer (arts. 43-45) |
|
|
Article 43 Designation of the data protection officer |
|
|
Article 44 Position of the data protection officer |
|
|
Article 45 Tasks of the data protection officer |
