Subject matter & Objectives
Material scope
Territorial scope
Definitions
Principles relating to processing of personal data
Lawfulness of processing
Conditions for consent
Conditions applicable to child’s consent in relation to information society services
Processing of special categories of personal data
Processing of personal data relating to criminal convictions and of fences
Processing which does not require identification
Transparency and modalities
Transparent information, communication and modalities for the exercise of the rights of the data subject
Information and access to personal data
Information to be provided where personal data are collected from the data subject
Information to be provided where personal data have not been obtained from the data subject
Right of access by the data subject
Rectification and erasure
Right to rectification
Right to erasure (‘right to be forgotten’)
Right to restriction of processing
Notification obligation regarding rectification or erasure of personal data or restriction of processing
Right to data portability
Right to object and automated individual decision making
Right to object
Automated individual decision making, including profiling
Restrictions
General obligations
Responsibility of the controller
Data protection by design and by default
Joint controllers
Representatives of controllers or processors not established in the United Kingdom
Processor
Processing under the authority of the controller or processor
Records of processing activities
Cooperation with the Commissioner
Security of processing
Notification of a personal data breach to the Commissioner
Communication of a personal data breach to the data subject
Data protection impact assessment and prior consultation
Data protection impact assessment
Prior consultation
Data protection officer
Designation of the data protection officer
Position of the data protection officer
Tasks of the data protection officer
Codes of conduct and certification
Codes of conduct
Monitoring of approved codes of conduct
Certification
Certification bodies
General principle for transfers
Transfers on the basis of an adequacy decision
Transfers subject to appropriate safeguards
Binding corporate rules
Derogations for specific situations
International cooperation for the protection of personal data
Independent status
Monitoring the application of this Regulation
Independence
Tasks and powers
Tasks
Powers
Activity reports
Right to lodge a complaint with the Commissioner
Right to an effective judicial remedy against the Commissioner
Right to an effective judicial remedy against a controller or processor
Representation of data subjects
Right to compensation and liability
General conditions for imposing administrative fines
Penalties
Processing and freedom of expression and information
Processing and public access to official documents
Processing and national security and defence
Safeguards and derogations relating to processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes
Repeal of Directive 95/46/EC
Relationship with Directive 2002/58/EC
Relationship with previously concluded Agreements
