Articles 24–43: controller and processor obligations, security of processing, breach notification, DPIAs, data protection officers, codes of conduct and certification.
Articles 12–23: transparency, information and access, rectification and erasure, data portability, objection and automated decision-making.
Articles 60–76: lead-authority cooperation, mutual assistance, the consistency mechanism and the European Data Protection Board.
Articles 5–11: processing principles, lawfulness, consent and special categories of personal data.
Articles 51–59: independence, competence, tasks and powers of the supervisory authorities.
Articles 77–84: complaints, judicial remedies, liability, compensation, administrative fines and penalties.
Articles 44–50: cross-border transfer mechanisms — adequacy decisions, appropriate safeguards, binding corporate rules and derogations.
Articles 85–91: freedom of expression, public access to documents, employment, archiving and research, and other specific processing situations.
Articles 94–99: repeal of Directive 95/46/EC, relationship to other instruments, Commission reports, and entry into force.
Articles 1–4 of Regulation (EU) 2016/679: subject-matter and objectives, material and territorial scope, and definitions.
Articles 92–93: exercise of the delegation and committee procedure.
View all →Plain-English overview of the framework.
View all →