GDPR articles — full text of the regulation | ODO 24

GDPR

Regulation (EU) 2016/679 of the European Parliament and of the Council

of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) of 27 April 2016 (OJ L 119, p. 1) (as amended by OJ L 2018 No 127, p. 2)

Regulation (EU) 2016/679 of the European Parliament and of the Council

Chapter I. General rules (Articles 1 to 4)

Article 1 Subject and purpose Article 2 Material scope of use Article 3 Territorial scope of use Article 4 Definitions

Chapter II. Rules (Articles 5 to 11)

Article 5 Rules on the processing of personal data Article 6 Conformity of the processing with the law Article 7 Conditions for giving consent Article 8 Conditions for giving consent by a child to information society services Article 9 Processing of specific categories of personal data Article 10 Processing of personal data relating to convictions and prohibited acts Article 11 Processing which does not require identification

Chapter III Rights of data subject (Articles 12 to 23)

Article 12 Transparent information and transparent communication and exercise of rights by data subjects Article 13 Information provided in the event of data collection from the data subject Article 14 Information provided in the event of personal data being obtained in a manner other than from the data subject Article 15 Right of access of data subjects Article 16 Right to rectification of data Article 17. Right to erasure (‘right to be forgotten’)Article 18 Right to restrict processing Article 19 Obligation to notify rectification or deletion of personal data or restriction of processing Article 20 Right to transfer data Article 21 Right to object Article 22 Automated decision-making in individual cases, including profiling Article 23 Restrictions

Chapter IV. Administrator and processor (Articles 24 to 43)

Article 24 Duties of the administrator Article 25 Inclusion of data protection in the design phase and default data protection Article 26 Co-directors Article 27 Representatives of administrators or processors who do not have an organisational unit in the Union Article 28 Processing entity Article 29 Processing under the authority of the controller or processor Article 30 Registration of the processing activities Article 31 Cooperation with a supervisory authority Article 32 Security of processing Article 33 Reporting of a personal data breach to a supervisory authority Article 34 Notification of a data subject of an infringement of the protection of personal data Article 35 Assessment of data protection effects Article 36 Previous consultations Article 37 Designation of the data protection officer Article 38 Status of data protection officer Article 39 Tasks of the data protection officer Article 40 of the code of conduct Article 41 Monitoring of approved codes of conduct Article 42 Certification Article 43 The certifying entity

Chapter V. Transfer of personal data to third countries or international organisations (Articles 44 to 50)

Article 44 General principle of transmission Article 45 Transfer on the basis of a decision establishing an appropriate level of protection Article 46 Transfers subject to appropriate safeguards Article 47 Binding corporate rules Article 48 Transfers or disclosures not permitted under Union law Article 49 Exceptions in specific situations Article 50 International cooperation for the protection of personal data

Chapter VI. Independent supervisory authorities (Articles 51 to 59)

Article 51 Supervisory authority Article 52 Independence of the Union Article 53 General conditions for the members of the supervisory authority Article 54 Rules for the establishment of a supervisory authority Article 55 Competence Article 56 Powers of the lead supervisory authority Article 57 Tasks Article 58 Powers Article 59 Reporting of activities

Chapter VII Cooperation and consistency (Articles 60 to 76)

Article 60 Cooperation between the lead supervisory authority and the other supervisory authorities concerned Article 61 Mutual assistance Article 62 Joint operations of supervisory authorities Article 63 The consistency mechanism Article 64 Opinion of the European Data Protection Board Article 65 Dispute settlement by the European Data Protection Board Article 66 Emergency mode Article 67 Exchange of information Article 68 European Data Protection Board Article 69 Independence of the Union Article 70 Tasks of the European Data Protection Board Article 71 Reports Article 72 Procedure Article 73 Chairman of the Committee Article 74 Tasks of the Chairman Article 75 Secretariat Article 76 Confidentiality

Chapter VIII Measures of legal protection, liability and sanctions (Articles 77 to 84)

Article 77 Right to lodge a complaint with a supervisory authority Article 78 Right to an effective remedy before a court against a supervisory authority Article 79 Right to an effective remedy in court against an administrator or processor Article 80 Representation of data subjects Article 81 Suspension of the proceedings Article 82 Right to compensation and liability Article 83 General conditions for imposing administrative fines Article 84 Penalties

Chapter IX. Provisions on special situations related to processing (Articles 85 to 91)

Article 85 Processing and freedom of expression and information Article 86 Processing and public access to official documents Article 87 Processing of the national identification number Article 88 Processing in the context of employment Article 89 Safeguards and exceptions applicable to processing for archival purposes in the public interest, for scientific or historical research purposes or for statistical purposes Article 90 Obligation to maintain confidentiality Article 91 Existing data protection rules applicable to churches and religious associations

Chapter X. Delegated acts and implementing acts (Articles 92 to 93)

Article 92. Exercise of the powers conferred Article 93. The committee procedure

Chapter XI Final rules (Articles 94 to 99)

Article 94 Repeal of Directive 95/46/EC Article 95 Relationship with Directive 2002/58/EC Article 96 Relation to previously concluded agreements Article 97 Report from the Commission Article 98 Review of other Union legal acts relating to data protection Article 99 Entry into force and application

Preamble (recitals 1-173)

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173

„We are perfectly capable of assessing the risk ourselves.”

Are you sure about that?

Ask us about the risk analysis.

Zapanuj nad RODO

Receive a free package of 4 tutorials and 4 e-learning trainings

The controller of your data is ODO 24 sp. z o.o. with its registered office in Warsaw (03-812) at Kamionkowska 45th street. Regulation of the Court of Justice. More information about the processing of personal data and your rights can be found at Privacy policy.

The controller of your data is ODO 24 sp. z o. o.