Regulation 2016/679/EU - General Data Protection Regulation (UK GDPR) (Assimilated Law)

Date-stamp loading

Version status: In force | Document consolidation status: Assimilated law updated to reflect all known changes

Published date: Pre-IP completion day

Consolidation Status: Assimilated law updated to reflect all known changes

Comparing proposed amendment...


	Recitals
	Chapter I General provisions (arts. 1-Draft 4A)
In force	Article 1 Subject-matter and objectives
In force	Article 2 Material scope
In force	Article 3 Territorial scope
In force	Article 4 Definitions
Draft	Draft Article 4A Periods of time
	Chapter II Principles (arts. 5-11)
In force	Article 5 Principles relating to processing of personal data
In force	Article 6 Lawfulness of processing
In force	Article 7 Conditions for consent
In force	Article 8 Conditions applicable to child's consent in relation to information society services
Draft	Draft Article 8A Purpose limitation: further processing
In force	Article 9 Processing of special categories of personal data
In force	Article 10 Processing of personal data relating to criminal convictions and offences
In force	Article 11 Processing which does not require identification
	Chapter III Rights of the data subject (arts. 12-23)
	Section 1 Transparency and modalities (art.12)
In force	Article 12 Transparent information, communication and modalities for the exercise of the rights of the data subject
Draft	Draft Article 12A Vexatious or excessive requests
Draft	Draft Article 12B Meaning of "applicable time period"
	Section 2 Information and access to personal data (arts. 13-15)
In force	Article 13 Information to be provided where personal data are collected from the data subject
In force	Article 14 Information to be provided where personal data have not been obtained from the data subject
In force	Article 15 Right of access by the data subject
	Section 3 Rectification and erasure (arts. 16-20)
In force	Article 16 Right to rectification
In force	Article 17 Right to erasure ('right to be forgotten')
In force	Article 18 Right to restriction of processing
In force	Article 19 Notification obligation regarding rectification or erasure of personal data or restriction of processing
In force	Article 20 Right to data portability
	Section 4 Right to object and automated individual decision-making (arts. 21-22)
In force	Article 21 Right to object
In force	Article 22 Automated individual decision-making, including profiling
	Draft Section 4A Automated individual decision-making (arts. 22A-22D)
Draft	Draft Article 22A Automated processing and significant decisions
Draft	Draft Article 22B Restrictions on automated decision-making
Draft	Draft Article 22C Safeguards for automated decision-making
Draft	Draft Article 22D Further provision about automated decision-making
	Section 5 Restrictions (art. 23)
In force	Article 23 Restrictions
	Chapter IV Controller and processor (arts. 24-43)
	Section 1 General obligations (arts. 24-31)
In force	Article 24 Responsibility of the controller
In force	Article 25 Data protection by design and by default
In force	Article 26 Joint controllers
In force	Article 27 Representatives of controllers or processors not established in the United Kingdom
	Draft Section 1A Senior responsible individual (arts. 27A-27C)
Draft	Draft Article 27A Designation of senior responsible individual
Draft	Draft Article 27B Senior responsible individual's tasks
Draft	Draft Article 27C Senior responsible individual's position
	Draft Section 1B Processor etc (arts. 28-29)
In force	Article 28 Processor
In force	Article 29 Processing under the authority of the controller or processor
	Draft Section 1C Records and co-operation with the Commissioner (arts. 30A-31)
In force	Article 30 Records of processing activities
Draft	Draft Article 30A Records of high risk processing of personal data
In force	Article 31 Cooperation with the Commissioner
	Section 2 Security of personal data (arts. 32-34)
In force	Article 32 Security of processing
In force	Article 33 Notification of a personal data breach to the Commissioner
In force	Article 34 Communication of a personal data breach to the data subject
	Section 3 Data protection impact assessment and prior consultation (arts. 35-36)
In force	Article 35 Data protection impact assessment
In force	Article 36 Prior consultation
	Section 4 Data protection officer (arts. 37-39)
In force	Article 37 Designation of the data protection officer
In force	Article 38 Position of the data protection officer
In force	Article 39 Tasks of the data protection officer
	Section 5 Codes of conduct and certification (arts. 40-43)
In force	Article 40 Codes of conduct
In force	Article 41 Monitoring of approved codes of conduct
In force	Article 42 Certification
In force	Article 43 Certification bodies
	Chapter V Transfers of personal data to third countries or international organisations (arts. 44-50)
In force	Article 44 General principle for transfers
Draft	Draft Article 44A General principles for transfers
In force	Article 45 Transfers on the basis of an adequacy decision
Draft	Draft Article 45A Transfers approved by regulations
Draft	Draft Article 45B The data protection test
Draft	Draft Article 45C Transfers approved by regulations: monitoring
In force	Article 46 Transfers subject to appropriate safeguards
In force	Article 47 Binding corporate rules
Draft	Draft Article 47A Transfers subject to appropriate safeguards: further provision
Omitted	Article 48 Transfers or disclosures not authorised by Union law
In force	Article 49 Derogations for specific situations
Draft	Draft Article 49A Restriction in the public interest
In force	Article 50 International cooperation for the protection of personal data
	Chapter VI The Commissioner (arts. 51-59)
	Section 1 Independent status (arts. 51-54)
In force	Article 51 Monitoring the application of this Regulation
In force	Article 52 Independence
Omitted	Article 53 General conditions for the members of the supervisory authority
Omitted	Article 54 Rules on the establishment of the supervisory authority
	Section 2 Tasks and powers (arts. 55-59)
Omitted	Article 55 Competence
Omitted	Article 56 Competence of the lead supervisory authority
In force	Article 57 Tasks
In force	Article 58 Powers
In force	Article 59 Activity report
	Chapter VII Cooperation and consistency (arts. 60-76)
	Section 1 Cooperation (arts. 60-62)
Omitted	Article 60 Cooperation between the lead supervisory authority and the other supervisory authorities concerned
Omitted	Article 61 Mutual assistance
Omitted	Article 62 Joint operations of supervisory authorities
	Section 2 Consistency (arts. 63-67)
Omitted	Article 63 Consistency mechanism In order to contribute to the consistent application of this
Omitted	Article 64 Opinion of the Board
Omitted	Article 65 Dispute resolution by the Board
Omitted	Article 66 Urgency procedure
Omitted	Article 67 Exchange of information
	Section 3 European data protection board (arts. 68-76)
Omitted	Article 68 European Data Protection Board
Omitted	Article 69 Independence
Omitted	Article 70 Tasks of the Board
Omitted	Article 71 Reports
Omitted	Article 72 Procedure
Omitted	Article 73 Chair
Omitted	Article 74 Tasks of the Chair
Omitted	Article 75 Secretariat
Omitted	Article 76 Confidentiality
	Chapter VIII Remedies, liability and penalties (arts. 77-84)
In force	Article 77 Right to lodge a complaint with the Commissioner
In force	Article 78 Right to an effective judicial remedy against the Commissioner
In force	Article 79 Right to an effective judicial remedy against a controller or processor
In force	Article 80 Representation of data subjects
Omitted	Article 81 Suspension of proceedings
In force	Article 82 Right to compensation and liability
In force	Article 83 General conditions for imposing administrative fines
In force	Article 84 Penalties
	Draft Chapter 8A Safeguards for processing for research, archiving or statistical purposes (arts. 84A-84D)
Draft	Draft Article 84A Research, archives and statistics
Draft	Draft Article 84B Additional requirements when processing for RAS purposes
Draft	Draft Article 84C Appropriate safeguards
Draft	Draft Article 84D Appropriate safeguards: further provision
	Chapter IX Provisions relating to specific processing situations (arts. 85-91)
In force	Article 85 Processing and freedom of expression and information
In force	Article 86 Processing and public access to official documents
In force	Article 86A Processing and national security and defence
Omitted	Article 87 Processing of the national identification number
Omitted	Article 88 Processing in the context of employment
In force	Article 89 Safeguards and derogations relating to processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes
Omitted	Article 90 Obligations of secrecy
Omitted	Article 91 Existing data protection rules of churches and religious associations
	Draft Chapter 9A Regulations (art. 91A)
Draft	Draft Article 91A Regulations made by Secretary of State
	Chapter X Delegated acts and implementing acts (arts. 92-93)
Omitted	Article 92 Exercise of the delegation
Omitted	Article 93 Committee procedure
	Chapter XI Final provisions (arts. 94-99)
In force	Article 94 Repeal of Directive 95/46/EC
In force	Article 95 Relationship with Directive 2002/58/EC
In force	Article 96 Relationship with previously concluded agreements
Omitted	Article 97 Commission reports
Omitted	Article 98 Review of other Union legal acts on data protection
Omitted	Article 99 Entry into force and application
Draft	Draft Annex 1 Lawfulness of processing: recognised legitimate interests
Draft	Draft Annex 2 Purpose limitation: processing to be treated as compatible with original purpose
	Done at

Page overview

RELATED

Document overview

Set a date to view the document

Text comparison

Print / Export Options

Export

Report template

Alert me to changes

Bookmarks

Search within this document

Regulation 2016/679/EU - General Data Protection Regulation (UK GDPR) (Assimilated Law)

Request a trial

The best way to experience Better Regulation is to try it - free and without obligation.

Set a date to view the document

Text comparison

Print / Export Options

Export

Report template

Alert me to changes

Bookmarks

Search within this document

Share

Regulation 2016/679/EU - General Data Protection Regulation (UK GDPR) (Assimilated Law)

Log in

Request a trial

The best way to experience Better Regulation is to try it - free and without obligation.