EU GDPR, Article-by-Article commentary

Articles’ list

• Introduction
• Article 1. GDPR. Subject-Matter and Objectives
• Article 2.GDPR. Material Scope
• Article 3.GDPR. Territorial scope
• Article 4(1).GDPR. Personal data
• Article 4(2). GDPR. Processing
• Article 4(3).GDPR. Restriction of processing
• Article 4(4).GDPR. Profiling
• Article 4(5).GDPR. Pseudonymisation
• Article 4(6). GDPR. Filing system
• Article 4(7). GDPR. Controller
• Article 4(8). GDPR. Processor
• Article 4(9). GDPR. Recipient
• Article 4 (10). GDPR. Third Party
• Article 4(11). GDPR. Consent
• Article 4(12). GDPR. Definitions
• Article 4(13).GDPR. Genetic data
• Article 4(14). GDPR. Biometric data
• Article 4(15). GDPR. Data concerning health
• Article 4(16). GDPR. Main establishment
• Article 4(17).GDPR. Representative
• Article 4(18).GDPR. Enterprise
• Article 4(19).GDPR. Group of undertakings
• Article 4(20). GDPR. Binding corporate rules
• Article 4(21). GDPR. Supervisory authority
• Article 4(22). GDPR. Supervisory authority concerned
• Article 4(23). GDPR. Cross-border processing
• Article 4(24). GDPR. Relevant and reasoned objection
• Article 4(25).GDPR. Definitions
• Article 4(26). GDPR. International organisation
• Article 5. GDPR. Principles relating to processing of personal data
• Article 6. GDPR.Lawfulness of processing
• Article 6(1)(f).GDPR. Content personalisation
• Article 6(1)(f).GDPR. Opinion and market research in the age of Big Data
• Article.6(1)(f). GDPR. Data processing for marketing purposes
• Article 6(1)(f). GDPR.Credit scoring
• Article 6(1)(f). GDPR. Video recording
• Article 7.GDPR. Conditions for consent
• Article 8. GDPR. Conditions applicable to child’s consent in relation to information society services*
• Article 9.GDPR. Processing of special categories of personal data
• Article 10.GDPR. Processing of personal data relating to criminal convictions and offences
• Article 11. GDPR.Processing which does not require identification
• Article 12. GDPR.Transparent information, communication and modalities for the exercise of the rights of the data subject
• Article 13. GDPR. Information to be provided where personal data are collected from the data subject
• Article 14. GDPR. Information to be provided where personal data have not been obtained from the data subject
• Article 15. GDPR.Right of access by the data subject
• Article 16.GDPR. Right to rectification
• Article 17. GDPR. Right to erasure (‘right to be forgotten’)
• Article 18.GDPR. Right to restriction of processing
• Article 19. GDPR. Notification obligation regarding rectification or erasure of personal data or restriction of processing
• Article 20. GDPR. Right to data portability
• Article 21.GDPR. Right to object
• Article 22. GDPR. Automated individual decision-making, including profiling
• Article 23. GDPR. Restrictions
• Article 24. GDPR. Responsibility of the controller
• Article 25. GDPR. Data protection by design and by default
• Article 26. GDPR. Joint controllers
• Article 27. GDPR. Representatives of controllers or processors not established in the Union
• Article 28. GDPR. Processor
• Article 29. GDPR. Processing under the authority of the controller or processor
• Article 30. GDPR. Records of processing activities
• Article 31. GDPR. Cooperation with the supervisory authority
• Article 32. GDPR. Security of processing
• Article 33. GDPR. Notification of a personal data breach to the supervisory authority
• Article 34. GDPR. Communication of a personal data breach to the data subject
• Article 35. GDPR. Data protection impact assessment
• Article 36. GDPR. Prior consultation
• Article 37. GDPR. Designation of the data protection officer
• Article 38. GDPR. Position of the data protection officer
• Article 39. GDPR. Tasks of the data protection officer
• Article 40. GDPR. Codes of conduct
• Article 41. GDPR. Monitoring of approved codes of conduct
• Article 42. GDPR. Certification
• Article 43. GDPR. Certification bodies
• Article 44. GDPR. General principle for transfers
• Article 45. GDPR. Transfers on the basis of an adequacy decision
• Article 46. GDPR. Transfers subject to appropriate safeguards
• Article 47. GDPR. Binding corporate rules
• Article 48. GDPR. Transfers or disclosures not authorised by Union law
• Article 49. GDPR. Derogations for specific situations
• Article 50. GDPR. International cooperation for the protection of personal data
• Article 51.GDPR. Supervisory authority
• Article 52.GDPR. Independence
• Article 53. GDPR. General conditions for the members of the supervisory authority
• Article 54. GDPR. Rules on the establishment of the supervisory authority
• Article 55. GDPR. Competence
• Article 56. GDPR. Competence of the lead supervisory authority
• Article 57. GDPR. Tasks
• Article 58. GDPR. Powers
• Article 59. GDPR. Activity reports
• Article 60. GDPR. Cooperation between the lead supervisory authority and the other supervisory authorities concerned
• Article 61. GDPR. Mutual assistance
• Article 62. GDPR. Joint operations of supervisory authorities
• Article 63. GDPR. Consistency mechanism
• Article 64.GDPR. Opinion of the Board
• Article 65. GDPR.Dispute resolution by the Board
• Article 66. GDPR. Urgency procedure
• Article 67. GDPR. Exchange of information
• Article 68.GDPR. European Data Protection Board
• Article 69. GDPR. Independence
• Article 70. GDPR. Tasks of the Board
• Article 71. GDPR. Reports
• Article 72. GDPR. Procedure
• Article 73. GDPR. Chair
• Article 74. GDPR.Tasks of the Chair
• Article 75. GDPR. Secretariat
• Article 76. GDPR. Confidentiality
• Article 77. GDPR. Right to lodge a complaint with a supervisory authority
• Article 78. GDPR. Right to an effective judicial remedy against a supervisory authority
• Article 79. GDPR. Right to an effective judicial remedy against a controller or processor
• Article 80. GDPR. Representation of data subjects
• Article 81. GDPR. Suspension of proceedings
• Article 82. GDPR. Right to compensation and liability
• Article 83. GDPR. General conditions for imposing administrative fines
• Article 84. GDPR. Penalties
• Article 85. GDPR. Processing and freedom of expression and information
• Article 86. GDPR. Processing and public access to official documents
• Article 87. GDPR. Processing of the national identification number
• Article 88. GDPR. Processing in the context of employment
• Article 89. GDPR. Safeguards and derogations relating to processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes
• Article 90. GDPR. Obligations of secrecy
• Article 91. GDPR. Existing data protection rules of churches and religious association
• Article 92. GDPR. Exercise of the delegation
• Article 93. GDPR. Committee procedure
• Article 94. GDPR. Repeal of Directive 95/46/EC
• Article 95. GDPR. Relationship with Directive 2002/58/E
• Article 96. GDPR. Relationship with previously concluded Agreements
• Article 97. GDPR. Commission reports
• Article 98. GDPR. Review of other Union legal acts on data protection
• Article 99. GDPR. Entry into force and application