Transparent information, communication and modalities for the exercise of the rights of the data subject

Information to be provided where personal data are collected from the data subject

Information to be provided where personal data have not been obtained from the data subject

Right of access by the data subject

Right to rectification

Right to erasure (‘right to be forgotten’)

Right to restriction of processing

Notification obligation regarding rectification or erasure of personal data or restriction of processing

Right to data portability

Right to object

Automated individual decision making, including profiling

Restrictions

Responsibility of the controller

Data protection by design and by default

Joint controllers

Representatives of controllers or processors not established in the United Kingdom

Processor

Processing under the authority of the controller or processor

Records of processing activities

Cooperation with the Commissioner

Security of processing

Notification of a personal data breach to the Commissioner

Communication of a personal data breach to the data subject

Data protection impact assessment

Prior consultation

Designation of the data protection officer

Position of the data protection officer

Tasks of the data protection officer

Codes of conduct

Monitoring of approved codes of conduct

Certification

Certification bodies

Monitoring the application of this Regulation

Independence

Tasks

Powers

Activity reports