Chapter IV: Controller and Processor
Articles 24–43: controller and processor obligations, security of processing, breach notification, DPIAs, data protection officers, codes of conduct and certification.
25 articles
- GDPR Article 25 — Data protection by design and by default
- GDPR Article 30 — Records of processing activities
- GDPR Article 32 — Security of processing
- GDPR Article 33 — Notification of a personal data breach to the supervisory authority
- GDPR Article 24 — Responsibility of the controller
- GDPR Article 24: Responsibility of the Controller
- GDPR Article 25: Data Protection by Design and by Default
- GDPR Article 26: Joint Controllers
- GDPR Article 27: Representatives of Controllers or Processors Not Established in the Union
- GDPR Article 28: Processor
- GDPR Article 29: Processing under the Authority of the Controller or Processor
- GDPR Article 30: Records of Processing Activities
- GDPR Article 31: Cooperation with the Supervisory Authority
- GDPR Article 32: Security of Processing
- GDPR Article 33: Notification of a Personal Data Breach to the Supervisory Authority
- GDPR Article 34: Communication of a Personal Data Breach to the Data Subject
- GDPR Article 35: Data Protection Impact Assessment
- GDPR Article 36: Prior Consultation
- GDPR Article 37: Designation of the Data Protection Officer
- GDPR Article 38: Position of the Data Protection Officer
- GDPR Article 39: Tasks of the Data Protection Officer
- GDPR Article 40: Codes of Conduct
- GDPR Article 41: Monitoring of Approved Codes of Conduct
- GDPR Article 42: Certification
- GDPR Article 43: Certification Bodies