European General Data Protection Regulation

Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

The European Parliament and the Council of the European Union, having regard to the Treaty on the Functioning of the European Union, and in particular Article 16 thereof, having regard to the proposal from the European Commission, after transmission of the draft legislative act to the national parliaments, having regard to the opinion of the European Economic and Social Committee (1), having regard to the opinion of the Committee of the Regions (2), acting in accordance with the ordinary legislative procedure (3), whereas:

(1) (2) (3) (4) (5) (6) (7) (8) (9) (10) (11) (12) (13) (14) (15) (16) (17) (18) (19) (20) (21) (22) (23) (24) (25) (26) (27) (28) (29) (30) (31) (32) (33) (34) (35) (36) (37) (38) (39) (40) (41) (42) (43) (44) (45) (46) (47) (48) (49) (50) (51) (52) (53) (54) (55) (56) (57) (58) (59) (60) (61) (62) (63) (64) (65) (66) (67) (68) (69) (70) (71) (72) (73) (74) (75) (76) (77) (78) (79) (80) (81) (82) (83) (84) (85) (86) (87) (88) (89) (90) (91) (92) (93) (94) (95) (96) (97) (98) (99) (100) (101) (102) (103) (104) (105) (106) (107) (108) (109) (110) (111) (112) (113) (114) (115) (116) (117) (118) (119) (120) (121) (122) (123) (124) (125) (126) (127) (128) (129) (130) (131) (132) (133) (134) (135) (136) (137) (138) (139) (140) (141) (142) (143) (144) (145) (146) (147) (148) (149) (150) (151) (152) (153) (154) (155) (156) (157) (158) (159) (160) (161) (162) (163) (164) (165) (166) (167) (168) (169) (170) (171) (172) (173)

have adopted this regulation:

  • (1) ABl. C 229, 31.7.2012, p. 90.
  • (2) ABl. C 391, 18.12.2012, p. 127.
  • (3) Position of the European Parliament of 12 March 2014 (not yet published in the Official Journal) and position of the Council at first reading of 8 April 2016 (not yet published in the Official Journal). Position of the European Parliament of 14 April 2016.

CHAPTER I – General provisions

CHAPTER II – Principles

CHAPTER III – Rights of the data subject

Section 1 – Transparency and modalities

Section 2 – Information and access to personal data

Section 3 – Rectification and erasure

Section 4 – Right to object and automated individual decision-making

Section 5 – Restrictions

CHAPTER IV – Controller and processor

Section 1 – General obligations

Section 2 – Security of personal data

Section 3 – Data protection impact assessment and prior consultation

Section 4 – Data protection officer

Section 5 – Codes of conduct and certification

CHAPTER V – Transfers of personal data to third countries or international organisations

CHAPTER VI – Independent supervisory authorities

Section 1 – Independent status

Section 2 – Competence, tasks and powers

CHAPTER VII – Cooperation and consistency

Section 1 – Cooperation

Section 2 – Consistency

Section 3 – European data protection board

CHAPTER VIII – Remedies, liability and penalties

CHAPTER IX – Provisions relating to specific processing situations

CHAPTER X – Delegated acts and implementing acts

CHAPTER XI – Final provisions

The full text of the GDPR corresponds to the publication in the Official Journal of the European Union of 4 May 2016. No liability is assumed for possible errors.