AI

AI

AI Act

Read More About AI

AI News

Proposal

Final
Consumer & E-commerce

Consumer & E-commerce

E-commerce Directive

Unfair Commercial Practices Directive

General Product Safety Regulation

European Accessibility Act

Read More About Consumer & E-commerce

Consumer & E-commerce News

Proposal

Final
Cybersecurity

Cybersecurity

Cyber Resilience Act

Cyber Solidarity Act

Cybersecurity Act (CSA)

Digital Operational Resilience Act (DORA)

NIS 2 Directive

Resilience of Critical Entities Directive (CER)

Read More About Cybersecurity

Cybersecurity News

Proposal

Final
Data

Data

Data Act

Data Governance Act (DGA)

Read More About Data

Data News

Proposal

Final
Digital Privacy

Digital Privacy

General Data Protection Regulation (GDPR)

e-Privacy Directive

Regulation laying down additional procedural rules related to the enforcement of the GDPR

Read More About Digital Privacy

Digital Privacy News

Proposal

Final
Digital Services

Digital Services

Digital Services Act (DSA)

Digital Markets Act (DMA)

Read More About Digital Services

Digital Services News

Proposal

Final

General Data Protection Regulation (GDPR)

About

Recitals

Chapter I – General provisions (Art. 1-4)
Art. 1GDPR - Subject-matter and objectives
Art. 2GDPR - Material scope
Art. 3GDPR - Territorial scope
Art. 4GDPR - Definitions
Chapter II – Principles (Art. 5-11)
Art. 5GDPR - Principles relating to processing of personal data
Art. 6GDPR - Lawfulness of processing
Art. 7GDPR - Conditions for consent
Art. 8GDPR - Conditions applicable to child's consent in relation to information society services
Art. 9GDPR - Processing of special categories of personal data
Art. 10GDPR - Processing of personal data relating to criminal convictions and offences
Art. 11GDPR - Processing which does not require identification
Chapter III – Rights of the data subject (Art.12-23)
Art. 12GDPR - Transparent information, communication and modalities for the exercise of the rights of the data subject
Art. 13GDPR - Information to be provided where personal data are collected from the data subject
Art. 14GDPR - Information to be provided where personal data have not been obtained from the data subject
Art. 15GDPR - Right of access by the data subject
Art. 16GDPR - Right to rectificaction
Art. 17GDPR - Right to erasure ('right to be forgotten')
Art. 18GDPR - Right to restriction of processing
Art. 19GDPR - Notification obligation regarding rectification or erasure of personal data or restriction of processing
Art. 20GDPR - Right to data portability
Art. 21GDPR - Right to object
Art. 22GDPR - Automated individual decision-making, including profiling
Art. 23GDPR - Restrictions
Chapter IV – Controller and processor (Art. 24-43)
Art. 24GDPR - Responsibility of the controller
Art. 25GDPR - Data protection by design and by default
Art. 26GDPR - Joint controllers
Art. 27GDPR - Representatives of controllers or processors not established in the Union
Art. 28GDPR - Processor
Art. 29GDPR - Processing under the authority of the controller or processor
Art. 30GDPR - Records of processing activities
Art. 31GDPR - Cooperation with the supervisory authority
Art. 32GDPR - Security of processing
Art. 33GDPR - Notification of a personal data breach to the supervisory authority
Art. 34GDPR - Communication of a personal data breach to the data subject
Art. 35GDPR - Data protection impact assessment
Art. 36GDPR - Prior consultation
Art. 37GDPR - Designation of the data protection officer
Art. 38GDPR - Position of the data protection officer
Art. 39GDPR - Tasks of the data protection officer
Art. 40GDPR - Codes of conduct
Art. 41GDPR - Monitoring of approved codes of conduct
Art. 42GDPR - Certification
Art. 43GDPR - Certification bodies
Chapter V – Transfers of personal data to third countries or international organisations (Art. 44-50)
Art. 44GDPR - General principle for transfers
Art. 45GDPR - Transfers on the basis of an adequacy decision
Art. 46GDPR - Transfers subject to appropriate safeguards
Art. 47GDPR - Binding corporate rules
Art. 48GDPR - Transfers or disclosures not authorized by Union law
Art. 49GDPR - Derogations for specific situations
Art. 50GDPR - International cooperation for the protection of personal data
Chapter VI – Independent supervisory authorities (Art. 51-59)
Art. 51GDPR - Supervisory authority
Art. 52GDPR - Independence
Art. 53GDPR - General conditions for the members of the supervisory authority
Art. 54GDPR - Rules on the establishment of the supervisory authority
Art. 55GDPR - Competence
Art. 56GDPR - Competence of the lead supervisory authority
Art. 57GDPR - Tasks
Art. 58GDPR - Powers
Art. 59GDPR - Article reports
Chapter VII – Cooperation and consistency (Art. 60-76)
Art. 60GDPR - Cooperation between the lead supervisory authority and the other supervisory authorities concerned
Art. 61GDPR - Mutual assistance
Art. 62GDPR - Joint operations of supervisory authorities
Art. 63GDPR - Consistency mechanism
Art. 64GDPR - Opinion of the Board
Art. 65GDPR - Dispute resolution by the Board
Art. 66GDPR - Urgency procedure
Art. 67GDPR - Exchange of information
Art. 68GDPR - European Data Protection Board
Art. 69GDPR - Independece
Art. 70GDPR - Tasks of the Board
Art. 71GDPR - Reports
Art. 72GDPR - Procedure
Art. 73GDPR - Chair
Art. 74GDPR - Tasks of the Chair
Art. 75GDPR - Secretariat
Art. 76GDPR - Confidentiality
Chapter VIII – Remedies, liability and penalties (Art. 77-84)
Art. 77GDPR - Right to lodge a complaint with a supervisory authority
Art. 78GDPR - Right to an effective judicial remedy against a supervisory authority
Art. 79GDPR - Right to an effective judicial remedy against a controller or processor
Art. 80GDPR - Representation of data subjects
Art. 81GDPR - Suspension of proceedings
Art. 82GDPR - Right to compensation and liability
Art. 83GDPR - General conditions for imposing administrative fines
Art. 84GDPR - Penalties
Chapter IX – Provisions relating to specific processing situations (Art. 85-91)
Art. 85GDPR - Processing and freedom of expression and information
Art. 86GDPR - Processing and public access to official documents
Art. 87GDPR - Processing of the national identification number
Art. 88GDPR - Processing in the context of employment
Art. 89GDPR - Safeguards and derogations relating to processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes
Art. 90GDPR - Obligations of secrecy
Art. 91GDPR - Existing data protection rules of churches and religious associations
Chapter X – Delegated acts and implementing acts (Art. 92-93)
Art. 92GDPR - Exercise of the delegation
Art. 93GDPR - Committee procedure
Chapter XI – Final provisions (Art. 94-99)
Art. 94GDPR - Repeal of Directive 95/46/EC
Art. 95GDPR - Relationship with Directive 2002/58/EC
Art. 96GDPR - Relationship with previously concluded Agreements
Art. 97GDPR - Commission reports
Art. 98GDPR - Review of other Union legal acts on data protection
Art. 99GDPR - Entry into force and application

General Data Protection Regulation (GDPR)

Status: Applicable since 25 May 2018

EUR-Lex-link: Adopted and published version, including other language versions, can also be found here

Name: Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation)

Type: Regulation

Objective:

To harmonize data privacy across the EU and to protect the privacy rights of individuals in the EU
Covers the processing of personal data by entities operating within the EU and by entities outside the EU if they offer goods or services to individuals in the EU
The purpose of the GDPR is to give individuals more control over their personal data and to simplify the regulatory environment for international business by harmonizing the regulation within the EU

Relevant to: Everyone processing personal data or individual who has his/her/their personal data processed

(Last updated 28 October 2025)

Previous article

General Data Protection Regulation (GDPR)

Next article

Chapter I - General provisions (Art. 1-4)