+CHAPTER IV Controller and processor
---+Section 1 General obligations
------+Article 24 Responsibility of the controller
---------+Article 24 1.
---------+Article 24 2.
---------+Article 24 3.
------+Article 25 Data protection by design and by default
---------+Article 25 1.
---------+Article 25 2.
---------+Article 25 3.
------+Article 26 Joint controllers
---------+Article 26 1.
---------+Article 26 2.
---------+Article 26 3.
------+Article 27 Representatives of controllers or processors not established in the Union
---------+Article 27 1.
---------+Article 27 2.
---------+Article 27 3.
---------+Article 27 4.
---------+Article 27 5.
------+Article 28 Processor
---------+Article 28 1.
---------+Article 28 2.
---------+Article 28 3.
---------+Article 28 4.
---------+Article 28 5.
---------+Article 28 6.
---------+Article 28 7.
---------+Article 28 8.
---------+Article 28 9.
---------+Article 28 10.
------+Article 29 Processing under the authority of the controller or processor
------+Article 30 Records of processing activities
---------+Article 30 1.
---------+Article 30 2.
---------+Article 30 3.
---------+Article 30 4.
---------+Article 30 5.
------+Article 31 Cooperation with the supervisory authority
---+Section 2 Security of personal data
------+Article 32 Security of processing
---------+Article 32 1.
---------+Article 32 2.
---------+Article 32 3.
---------+Article 32 4.
------+Article 33 Notification of a personal data breach to the supervisory authority
---------+Article 33 1.
---------+Article 33 2.
---------+Article 33 3.
---------+Article 33 4.
---------+Article 33 5.
------+Article 34 Communication of a personal data breach to the data subject
---------+Article 34 1.
---------+Article 34 2.
---------+Article 34 3.
---------+Article 34 4.
---+Section 3 Data protection impact assessment and prior consultation
------+Article 35 Data protection impact assessment
---------+Article 35 1.
---------+Article 35 2.
---------+Article 35 3.
---------+Article 35 4.
---------+Article 35 5.
---------+Article 35 6.
---------+Article 35 7.
---------+Article 35 8.
---------+Article 35 9.
---------+Article 35 10.
---------+Article 35 11.
------+Article 36 Prior consultation
---------+Article 36 1.
---------+Article 36 2.
---------+Article 36 3.
---------+Article 36 4.
---------+Article 36 5.
---+Section 4 Data protection officer
------+Article 37 Designation of the data protection officer
---------+Article 37 1.
---------+Article 37 2.
---------+Article 37 3.
---------+Article 37 4.
---------+Article 37 5.
---------+Article 37 6.
---------+Article 37 7.
------+Article 38 Position of the data protection officer
---------+Article 38 1.
---------+Article 38 2.
---------+Article 38 3.
---------+Article 38 4.
---------+Article 38 5.
---------+Article 38 6.
------+Article 39 Tasks of the data protection officer
---------+Article 39 1.
---------+Article 39 2.
---+Section 5 Codes of conduct and certification
------+Article 40 Codes of conduct
---------+Article 40 1.
---------+Article 40 2.
---------+Article 40 3.
---------+Article 40 4.
---------+Article 40 5.
---------+Article 40 6.
---------+Article 40 7.
---------+Article 40 8.
---------+Article 40 9.
---------+Article 40 10.
---------+Article 40 11.
------+Article 41 Monitoring of approved codes of conduct
---------+Article 41 1.
---------+Article 41 2.
---------+Article 41 3.
---------+Article 41 4.
---------+Article 41 5.
---------+Article 41 6.
------+Article 42 Certification
---------+Article 42 1.
---------+Article 42 2.
---------+Article 42 3.
---------+Article 42 4.
---------+Article 42 5.
---------+Article 42 6.
---------+Article 42 7.
---------+Article 42 8.
------+Article 43 Certification bodies
---------+Article 43 1.
---------+Article 43 2.
---------+Article 43 3.
---------+Article 43 4.
---------+Article 43 5.
---------+Article 43 6.
---------+Article 43 7.
---------+Article 43 8.
---------+Article 43 9.

CHAPTER IV Controller and processor

CHAPTER IV Controller and processor

1. Overview

,
Section 1 General obligations Section 1 General obligations
Section 2 Security of personal data Section 2 Security of personal data
Section 3 Data protection impact assessment and prior consultation Section 3 Data protection impact assessment and prior consultation
Section 4 Data protection officer Section 4 Data protection officer
Section 5 Codes of conduct and certification Section 5 Codes of conduct and certification

1.1 References

1.2 Identified Requirements

1.3 Related Standards

2. Identified Requirements

Requirements

3. Related Standards

Standards