European General Data Protection Regulation

On this page you will find the full text of the EU General Data Protection Regulation (GDPR). To make it easier for you to navigate the legal text, you will find a quick start with links to all articles of the GDPR first. Below you will find the complete table of contents including the recitals.

Quick start

Chapter I –  1 2 3 4
Chapter II 5 6 7 8 9 10 11
Chapter III 12 13 14 15 16 17 18 19 20 21 22 23
Chapter IV 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43
Chapter V 44 45 46 47 48 49 50
Chapter VI 51 52 53 54 55 56 57 58 59
Chapter VII 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76
Chapter VIII 77 78 79 80 81 82 83 84
Chapter IX 85 86 87 88 89 90 91
Chapter X 92 93
Chapter XI 94 95 96 97 98 99

Full text

Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

The European Parliament and the Council of the European Union, having regard to the Treaty on the Functioning of the European Union, and in particular Article 16 thereof, having regard to the proposal from the European Commission, after transmission of the draft legislative act to the national parliaments, having regard to the opinion of the European Economic and Social Committee (1), having regard to the opinion of the Committee of the Regions (2), acting in accordance with the ordinary legislative procedure (3), whereas:

(1) (2) (3) (4) (5) (6) (7) (8) (9) (10) (11) (12) (13) (14) (15) (16) (17) (18) (19) (20) (21) (22) (23) (24) (25) (26) (27) (28) (29) (30) (31) (32) (33) (34) (35) (36) (37) (38) (39) (40) (41) (42) (43) (44) (45) (46) (47) (48) (49) (50) (51) (52) (53) (54) (55) (56) (57) (58) (59) (60) (61) (62) (63) (64) (65) (66) (67) (68) (69) (70) (71) (72) (73) (74) (75) (76) (77) (78) (79) (80) (81) (82) (83) (84) (85) (86) (87) (88) (89) (90) (91) (92) (93) (94) (95) (96) (97) (98) (99) (100) (101) (102) (103) (104) (105) (106) (107) (108) (109) (110) (111) (112) (113) (114) (115) (116) (117) (118) (119) (120) (121) (122) (123) (124) (125) (126) (127) (128) (129) (130) (131) (132) (133) (134) (135) (136) (137) (138) (139) (140) (141) (142) (143) (144) (145) (146) (147) (148) (149) (150) (151) (152) (153) (154) (155) (156) (157) (158) (159) (160) (161) (162) (163) (164) (165) (166) (167) (168) (169) (170) (171) (172) (173)

have adopted this regulation:

  • (1) ABl. C 229, 31.7.2012, p. 90.
  • (2) ABl. C 391, 18.12.2012, p. 127.
  • (3) Position of the European Parliament of 12 March 2014 (not yet published in the Official Journal) and position of the Council at first reading of 8 April 2016 (not yet published in the Official Journal). Position of the European Parliament of 14 April 2016.

CHAPTER I – General provisions

CHAPTER II – Principles

CHAPTER III – Rights of the data subject

Section 1 – Transparency and modalities

Section 2 – Information and access to personal data

Section 3 – Rectification and erasure

Section 4 – Right to object and automated individual decision-making

Section 5 – Restrictions

CHAPTER IV – Controller and processor

Section 1 – General obligations

Section 2 – Security of personal data

Section 3 – Data protection impact assessment and prior consultation

Section 4 – Data protection officer

Section 5 – Codes of conduct and certification

CHAPTER V – Transfers of personal data to third countries or international organisations

CHAPTER VI – Independent supervisory authorities

Section 1 – Independent status

Section 2 – Competence, tasks and powers

CHAPTER VII – Cooperation and consistency

Section 1 – Cooperation

Section 2 – Consistency

Section 3 – European data protection board

CHAPTER VIII – Remedies, liability and penalties

CHAPTER IX – Provisions relating to specific processing situations

CHAPTER X – Delegated acts and implementing acts

CHAPTER XI – Final provisions

The full text of the GDPR corresponds to the publication in the Official Journal of the European Union of 4 May 2016. No liability is assumed for possible errors.