+CHAPTER IV Controller and processor
---+Section 1 General obligations
------+Article 24 Responsibility of the controller
---------+Article 24 1.
---------+Article 24 2.
---------+Article 24 3.
------+Article 25 Data protection by design and by default
---------+Article 25 1.
---------+Article 25 2.
---------+Article 25 3.
------+Article 26 Joint controllers
---------+Article 26 1.
---------+Article 26 2.
---------+Article 26 3.
------+Article 27 Representatives of controllers or processors not established in the Union
---------+Article 27 1.
---------+Article 27 2.
---------+Article 27 3.
---------+Article 27 4.
---------+Article 27 5.
------+Article 28 Processor
---------+Article 28 1.
---------+Article 28 2.
---------+Article 28 3.
---------+Article 28 4.
---------+Article 28 5.
---------+Article 28 6.
---------+Article 28 7.
---------+Article 28 8.
---------+Article 28 9.
---------+Article 28 10.
------+Article 29 Processing under the authority of the controller or processor
------+Article 30 Records of processing activities
---------+Article 30 1.
---------+Article 30 2.
---------+Article 30 3.
---------+Article 30 4.
---------+Article 30 5.
------+Article 31 Cooperation with the supervisory authority
---+Section 2 Security of personal data
------+Article 32 Security of processing
---------+Article 32 1.
---------+Article 32 2.
---------+Article 32 3.
---------+Article 32 4.
------+Article 33 Notification of a personal data breach to the supervisory authority
---------+Article 33 1.
---------+Article 33 2.
---------+Article 33 3.
---------+Article 33 4.
---------+Article 33 5.
------+Article 34 Communication of a personal data breach to the data subject
---------+Article 34 1.
---------+Article 34 2.
---------+Article 34 3.
---------+Article 34 4.
---+Section 3 Data protection impact assessment and prior consultation
------+Article 35 Data protection impact assessment
---------+Article 35 1.
---------+Article 35 2.
---------+Article 35 3.
---------+Article 35 4.
---------+Article 35 5.
---------+Article 35 6.
---------+Article 35 7.
---------+Article 35 8.
---------+Article 35 9.
---------+Article 35 10.
---------+Article 35 11.
------+Article 36 Prior consultation
---------+Article 36 1.
---------+Article 36 2.
---------+Article 36 3.
---------+Article 36 4.
---------+Article 36 5.
---+Section 4 Data protection officer
------+Article 37 Designation of the data protection officer
---------+Article 37 1.
---------+Article 37 2.
---------+Article 37 3.
---------+Article 37 4.
---------+Article 37 5.
---------+Article 37 6.
---------+Article 37 7.
------+Article 38 Position of the data protection officer
---------+Article 38 1.
---------+Article 38 2.
---------+Article 38 3.
---------+Article 38 4.
---------+Article 38 5.
---------+Article 38 6.
------+Article 39 Tasks of the data protection officer
---------+Article 39 1.
---------+Article 39 2.
---+Section 5 Codes of conduct and certification
------+Article 40 Codes of conduct
---------+Article 40 1.
---------+Article 40 2.
---------+Article 40 3.
---------+Article 40 4.
---------+Article 40 5.
---------+Article 40 6.
---------+Article 40 7.
---------+Article 40 8.
---------+Article 40 9.
---------+Article 40 10.
---------+Article 40 11.
------+Article 41 Monitoring of approved codes of conduct
---------+Article 41 1.
---------+Article 41 2.
---------+Article 41 3.
---------+Article 41 4.
---------+Article 41 5.
---------+Article 41 6.
------+Article 42 Certification
---------+Article 42 1.
---------+Article 42 2.
---------+Article 42 3.
---------+Article 42 4.
---------+Article 42 5.
---------+Article 42 6.
---------+Article 42 7.
---------+Article 42 8.
------+Article 43 Certification bodies
---------+Article 43 1.
---------+Article 43 2.
---------+Article 43 3.
---------+Article 43 4.
---------+Article 43 5.
---------+Article 43 6.
---------+Article 43 7.
---------+Article 43 8.
---------+Article 43 9.

CHAPTER IV Controller and processor

CHAPTER IV Controller and processor

1. Overview

,
Section 1 General obligations Section 1 General obligations
Section 2 Security of personal data Section 2 Security of personal data
Section 3 Data protection impact assessment and prior consultation Section 3 Data protection impact assessment and prior consultation
Section 4 Data protection officer Section 4 Data protection officer
Section 5 Codes of conduct and certification Section 5 Codes of conduct and certification

1.1 References

1.2 Identified Requirements

1.3 Related Standards

2. Identified Requirements

Requirements

3. Related Standards

Standards
  • Builddate: 04.05.2016 00:00:00 -Doknr: CELEX:32016R0679
  • EULAW -

    EN: Legal acts of the European Union from EUR-Lex, https://eur-lex.europa.eu/. © European Union. Re-use is authorised by Decision 2011/833/EU, provided the source is acknowledged; the consolidated texts are licensed under CC BY 4.0 (EUR-Lex legal notice). Divided into sections and converted into the GRCA format, the wording unchanged. Only the legislation published in the Official Journal of the European Union is deemed authentic.

    DE: Rechtsakte der Europäischen Union aus EUR-Lex, https://eur-lex.europa.eu/. © Europäische Union. Weiterverwendung nach Beschluss 2011/833/EU mit Quellenangabe gestattet; die konsolidierten Fassungen stehen unter CC BY 4.0 (Rechtlicher Hinweis von EUR-Lex). In Abschnitte aufgeteilt und in das GRCA-Format umgewandelt, der Wortlaut unverändert. Verbindlich sind allein die im Amtsblatt der Europäischen Union veröffentlichten Rechtsakte.