# Instrument Metadata # Output tuned for LLM consumption -- deterministic parse of the # EUR-Lex source, no LLM involved in generation. instrument_id: eudpr celex: "32018R1725" eli: "http://data.europa.eu/eli/reg/2018/1725/oj" full_title: EU Institutions Data Protection Regulation (EU) 2018/1725 short_title: EUDPR instrument_type: regulation document_type: regulation normative_weight: binding jurisdiction: EU effective_period: from: "2018-12-11" to: null dates: adopted: "2018-10-23" entered_into_force: "2018-12-11" status: in_force legal_status: in_force structure_levels: - title - chapter - article total_articles: 101 total_recitals: 89 total_annexes: 0 definitions_article: 3 chunk_strategy: by_chapter chunks: - /eudpr/chunks/recitals.md - /eudpr/chunks/eudpr_t01_general_provisions.md - /eudpr/chunks/eudpr_t02_general_principles.md - /eudpr/chunks/eudpr_t03_ch01_transparency_and_modalities.md - /eudpr/chunks/eudpr_t03_ch02_information_and_access_to_personal_data.md - /eudpr/chunks/eudpr_t03_ch03_rectification_and_erasure.md - /eudpr/chunks/eudpr_t03_ch04_right_to_object_and_automated_individual.md - /eudpr/chunks/eudpr_t03_ch05_restrictions.md - /eudpr/chunks/eudpr_t04_ch01_general_obligations.md - /eudpr/chunks/eudpr_t04_ch02_security_of_personal_data.md - /eudpr/chunks/eudpr_t04_ch03_confidentiality_of_electronic_communicat.md - /eudpr/chunks/eudpr_t04_ch04_data_protection_impact_assessment_and_pr.md - /eudpr/chunks/eudpr_t04_ch05_information_and_legislative_consultation.md - /eudpr/chunks/eudpr_t04_ch06_data_protection_officer.md - /eudpr/chunks/eudpr_t05_transfers_of_personal_data_to_third_coun.md - /eudpr/chunks/eudpr_t06_european_data_protection_supervisor.md - /eudpr/chunks/eudpr_t07_cooperation_and_consistency.md - /eudpr/chunks/eudpr_t08_remedies_liability_and_penalties.md - /eudpr/chunks/eudpr_t09_processing_of_operational_personal_data_.md - /eudpr/chunks/eudpr_t10_implementing_acts.md - /eudpr/chunks/eudpr_t11_review.md - /eudpr/chunks/eudpr_t12_final_provisions.md key_dates: - date: "2018-10-23" type: lifecycle context: "Adopted" - date: "2018-12-11" type: application article: "99" context: "Regulation (EC) No 45/2001 and Decision No 1247/2002/EC are repealed with effect from 11 December 2018. References to the repealed…" - date: "2018-12-11" type: lifecycle context: "Entered into force" - date: "2019-12-12" type: lifecycle article: "101" context: "…2. However, this Regulation shall apply to processing of personal data by Eurojust from 12 December 2019." - date: "2022-04-30" type: review article: "97" context: "No later than 30 April 2022, and every five years thereafter, the…" - date: "2022-04-30" type: review article: "98" context: "1. By 30 April 2022, the Commission shall review legal…" generated_at: "2026-09-08T12:37:01.326Z" articles: - article_number: 1 article_title: Subject matter and objectives chunk_file: /eudpr/chunks/eudpr_t01_general_provisions.md path: "Title 1 > Article 1" applies_to_entities: [] topics: - data_protection keywords: - data - personal data - processing - union institutions and bodies - recipient contains: obligations: true prohibitions: false permissions: false definitions: false penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: [] external_references: [] recitals: [] - article_number: 2 article_title: Scope chunk_file: /eudpr/chunks/eudpr_t01_general_provisions.md path: "Title 1 > Article 2" applies_to_entities: [] topics: - data_protection keywords: - data - system - personal data - operational personal data - processing - filing system - union institutions and bodies contains: obligations: true prohibitions: true permissions: false definitions: true penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: - target: Article 3 - target: Article 98 external_references: [] recitals: [] - article_number: 3 article_title: Definitions chunk_file: /eudpr/chunks/eudpr_t01_general_provisions.md path: "Title 1 > Article 3" applies_to_entities: - member_states - competent_authorities topics: - data_protection - authorisation keywords: - liability - SEPA - terminal - POS - biometric - security - data - access - consent - third party - system - network - ITS - personal data - operational personal data - processing - restriction of processing - profiling - pseudonymisation - filing system contains: obligations: true prohibitions: true permissions: true definitions: true penalties: true delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: [] external_references: - instrument_type: regulation reference: "2016/679" - instrument_type: directive reference: "2016/680" - instrument_type: regulation reference: "2016/679" - instrument_type: directive reference: "2016/680" recitals: [] - article_number: 4 article_title: Principles relating to processing of personal data chunk_file: /eudpr/chunks/eudpr_t02_general_principles.md path: "Title 2 > Article 4" applies_to_entities: [] topics: - data_protection - authorisation - liability keywords: - POS - security - data - ITS - personal data - processing - controller contains: obligations: true prohibitions: false permissions: true definitions: false penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: - target: Article 13 external_references: [] recitals: [] - article_number: 5 article_title: Lawfulness of processing chunk_file: /eudpr/chunks/eudpr_t02_general_principles.md path: "Title 2 > Article 5" applies_to_entities: [] topics: - data_protection keywords: - POS - data - consent - personal data - processing - controller contains: obligations: true prohibitions: false permissions: false definitions: false penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: [] external_references: [] recitals: - 88 - article_number: 6 article_title: Processing for another compatible purpose chunk_file: /eudpr/chunks/eudpr_t02_general_principles.md path: "Title 2 > Article 6" applies_to_entities: [] topics: - data_protection keywords: - POS - data - consent - personal data - processing - pseudonymisation - controller contains: obligations: true prohibitions: false permissions: true definitions: false penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: - target: Article 25 paragraph: "1" - target: Article 10 - target: Article 11 external_references: [] recitals: [] - article_number: 7 article_title: Conditions for consent chunk_file: /eudpr/chunks/eudpr_t02_general_principles.md path: "Title 2 > Article 7" applies_to_entities: [] topics: - data_protection - enforcement keywords: - data - access - consent - ITS - personal data - processing - controller contains: obligations: true prohibitions: true permissions: true definitions: false penalties: true delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: [] external_references: [] recitals: - 54 - article_number: 8 article_title: Conditions applicable to a child’s consent in relation to information society services chunk_file: /eudpr/chunks/eudpr_t02_general_principles.md path: "Title 2 > Article 8" applies_to_entities: - member_states topics: - data_protection - authorisation keywords: - data - consent - RTS - personal data - processing - controller - information society service contains: obligations: true prohibitions: true permissions: false definitions: false penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: - target: Article 5 paragraph: "1" external_references: [] recitals: - 1 - 74 - article_number: 9 article_title: Transmissions of personal data to recipients established in the Union other than Union institutions and bodies chunk_file: /eudpr/chunks/eudpr_t02_general_principles.md path: "Title 2 > Article 9" applies_to_entities: [] topics: - data_protection keywords: - POS - data - access - personal data - controller - union institutions and bodies - recipient contains: obligations: true prohibitions: false permissions: false definitions: false penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: - target: Article 4 - target: Article 5 - target: Article 6 external_references: [] recitals: [] - article_number: 10 article_title: Processing of special categories of personal data chunk_file: /eudpr/chunks/eudpr_t02_general_principles.md path: "Title 2 > Article 10" applies_to_entities: - member_states topics: - data_protection - authorisation keywords: - POS - ATM - biometric - security - data - consent - cross-border - system - ITS - personal data - processing - controller - genetic data - biometric data - data concerning health contains: obligations: true prohibitions: true permissions: true definitions: false penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: [] external_references: [] recitals: [] - article_number: 11 article_title: Processing of personal data relating to criminal convictions and offences chunk_file: /eudpr/chunks/eudpr_t02_general_principles.md path: "Title 2 > Article 11" applies_to_entities: [] topics: - data_protection - authorisation - security keywords: - security - data - personal data - processing contains: obligations: true prohibitions: false permissions: false definitions: false penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: - target: Article 5 paragraph: "1" external_references: [] recitals: [] - article_number: 12 article_title: Processing which does not require identification chunk_file: /eudpr/chunks/eudpr_t02_general_principles.md path: "Title 2 > Article 12" applies_to_entities: [] topics: - data_protection keywords: - POS - data - personal data - processing - controller contains: obligations: true prohibitions: true permissions: false definitions: false penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: - target: Article 17 - target: Article 18 - target: Article 19 - target: Article 20 - target: Article 21 - target: Article 22 external_references: [] recitals: [] - article_number: 13 article_title: "Safeguards relating to processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes" chunk_file: /eudpr/chunks/eudpr_t02_general_principles.md path: "Title 2 > Article 13" applies_to_entities: [] topics: - data_protection keywords: - POS - data - ITS - processing - pseudonymisation contains: obligations: true prohibitions: false permissions: true definitions: false penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: [] external_references: [] recitals: [] - article_number: 14 article_title: "Transparent information, communication and modalities for the exercise of the rights of the data subject" chunk_file: /eudpr/chunks/eudpr_t03_ch01_transparency_and_modalities.md path: "Title 3 > Chapter 1 > Article 14" applies_to_entities: - european_commission topics: - data_protection - transparency - information_requirements keywords: - POS - data - access - processing - controller - union institutions and bodies contains: obligations: true prohibitions: true permissions: true definitions: true penalties: false delegated_powers: true implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: - target: Article 15 - target: Article 16 - target: Article 17 - target: Article 18 - target: Article 19 - target: Article 20 - target: Article 21 - target: Article 22 - target: Article 23 - target: Article 24 - target: Article 12 paragraph: "2" - target: Article 12 external_references: - instrument_type: regulation reference: "2016/679" recitals: [] - article_number: 15 article_title: Information to be provided where personal data are collected from the data subject chunk_file: /eudpr/chunks/eudpr_t03_ch02_information_and_access_to_personal_data.md path: "Title 3 > Chapter 2 > Article 15" applies_to_entities: - european_commission topics: - data_protection - data_access - payment_systems - information_requirements keywords: - transfer - POS - data - access - consent - ITS - personal data - processing - restriction of processing - profiling - controller - recipient - international organisation contains: obligations: true prohibitions: true permissions: false definitions: true penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: - target: Article 48 - target: Article 5 paragraph: "1" - target: Article 10 paragraph: "2" - target: Article 24 paragraph: "1" - target: Article 24 paragraph: "4" external_references: [] recitals: [] - article_number: 16 article_title: Information to be provided where personal data have not been obtained from the data subject chunk_file: /eudpr/chunks/eudpr_t03_ch02_information_and_access_to_personal_data.md path: "Title 3 > Chapter 2 > Article 16" applies_to_entities: - european_commission topics: - data_protection - data_access - payment_systems - information_requirements keywords: - transfer - POS - data - access - consent - ITS - personal data - processing - restriction of processing - profiling - controller - recipient - international organisation contains: obligations: true prohibitions: true permissions: false definitions: true penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: - target: Article 48 - target: Article 5 paragraph: "1" - target: Article 10 paragraph: "2" - target: Article 24 paragraph: "1" - target: Article 24 paragraph: "4" external_references: [] recitals: - 1 - 9 - article_number: 17 article_title: Right of access by the data subject chunk_file: /eudpr/chunks/eudpr_t03_ch02_information_and_access_to_personal_data.md path: "Title 3 > Chapter 2 > Article 17" applies_to_entities: [] topics: - data_protection - data_access - payment_systems keywords: - transfer - POS - data - access - personal data - processing - restriction of processing - profiling - controller - recipient - international organisation contains: obligations: true prohibitions: true permissions: true definitions: true penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: - target: Article 24 paragraph: "1" - target: Article 24 paragraph: "4" - target: Article 48 external_references: [] recitals: [] - article_number: 18 article_title: Right to rectification chunk_file: /eudpr/chunks/eudpr_t03_ch03_rectification_and_erasure.md path: "Title 3 > Chapter 3 > Article 18" applies_to_entities: [] topics: - data_protection keywords: - POS - data - personal data - processing - controller contains: obligations: true prohibitions: false permissions: true definitions: true penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: [] external_references: [] recitals: [] - article_number: 19 article_title: Right to erasure (‘right to be forgotten’) chunk_file: /eudpr/chunks/eudpr_t03_ch03_rectification_and_erasure.md path: "Title 3 > Chapter 3 > Article 19" applies_to_entities: [] topics: - data_protection keywords: - POS - data - consent - personal data - processing - controller - controllers other than union institutions and bodies - union institutions and bodies - information society service contains: obligations: true prohibitions: true permissions: true definitions: false penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: - target: Article 5 paragraph: "1" - target: Article 10 paragraph: "2" - target: Article 23 paragraph: "1" - target: Article 8 paragraph: "1" - target: Article 10 paragraph: "3" external_references: [] recitals: [] - article_number: 20 article_title: Right to restriction of processing chunk_file: /eudpr/chunks/eudpr_t03_ch03_rectification_and_erasure.md path: "Title 3 > Chapter 3 > Article 20" applies_to_entities: - member_states topics: - data_protection keywords: - POS - data - consent - system - personal data - processing - restriction of processing - filing system - controller contains: obligations: true prohibitions: true permissions: true definitions: true penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: - target: Article 23 paragraph: "1" external_references: [] recitals: [] - article_number: 21 article_title: Notification obligation regarding rectification or erasure of personal data or restriction of processing chunk_file: /eudpr/chunks/eudpr_t03_ch03_rectification_and_erasure.md path: "Title 3 > Chapter 3 > Article 21" applies_to_entities: [] topics: - data_protection keywords: - POS - data - notification - personal data - processing - restriction of processing - controller - recipient contains: obligations: true prohibitions: false permissions: false definitions: false penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: - target: Article 18 - target: Article 19 paragraph: "1" - target: Article 20 external_references: [] recitals: [] - article_number: 22 article_title: Right to data portability chunk_file: /eudpr/chunks/eudpr_t03_ch03_rectification_and_erasure.md path: "Title 3 > Chapter 3 > Article 22" applies_to_entities: [] topics: - data_protection keywords: - data - consent - personal data - processing - controller - controllers other than union institutions and bodies - union institutions and bodies contains: obligations: true prohibitions: true permissions: true definitions: true penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: - target: Article 5 paragraph: "1" - target: Article 10 paragraph: "2" - target: Article 19 external_references: [] recitals: [] - article_number: 23 article_title: Right to object chunk_file: /eudpr/chunks/eudpr_t03_ch04_right_to_object_and_automated_individual.md path: "Title 3 > Chapter 4 > Article 23" applies_to_entities: [] topics: - data_protection keywords: - SEPA - POS - data - personal data - processing - profiling - controller - information society service contains: obligations: true prohibitions: false permissions: true definitions: true penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: - target: Article 5 paragraph: "1" - target: Article 36 - target: Article 37 external_references: [] recitals: [] - article_number: 24 article_title: "Automated individual decision-making, including profiling" chunk_file: /eudpr/chunks/eudpr_t03_ch04_right_to_object_and_automated_individual.md path: "Title 3 > Chapter 4 > Article 24" applies_to_entities: [] topics: - data_protection - authorisation keywords: - data - consent - personal data - processing - profiling - controller contains: obligations: true prohibitions: true permissions: false definitions: false penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: - target: Article 10 paragraph: "1" - target: Article 10 paragraph: "2" external_references: [] recitals: [] - article_number: 25 article_title: Restrictions chunk_file: /eudpr/chunks/eudpr_t03_ch05_restrictions.md path: "Title 3 > Chapter 5 > Article 25" applies_to_entities: - member_states topics: - data_protection keywords: - transfer - POS - security - data - access - network - ITS - personal data - processing - controller - union institutions and bodies - electronic communications network contains: obligations: true prohibitions: false permissions: true definitions: false penalties: true delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: - target: Article 14 - target: Article 15 - target: Article 16 - target: Article 17 - target: Article 18 - target: Article 19 - target: Article 20 - target: Article 21 - target: Article 22 - target: Article 4 - target: Article 23 - target: Article 13 - target: Article 45 paragraph: "2" external_references: [] recitals: [] - article_number: 26 article_title: Responsibility of the controller chunk_file: /eudpr/chunks/eudpr_t04_ch01_general_obligations.md path: "Title 4 > Chapter 1 > Article 26" applies_to_entities: [] topics: - data_protection keywords: - POS - data - processing - controller contains: obligations: true prohibitions: false permissions: true definitions: false penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: [] external_references: - instrument_type: regulation reference: "2016/679" recitals: [] - article_number: 27 article_title: Data protection by design and by default chunk_file: /eudpr/chunks/eudpr_t04_ch01_general_obligations.md path: "Title 4 > Chapter 1 > Article 27" applies_to_entities: [] topics: - data_protection keywords: - POS - data - access - ITS - personal data - processing - pseudonymisation - controller contains: obligations: true prohibitions: false permissions: true definitions: true penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: [] external_references: - instrument_type: regulation reference: "2016/679" recitals: [] - article_number: 28 article_title: Joint controllers chunk_file: /eudpr/chunks/eudpr_t04_ch01_general_obligations.md path: "Title 4 > Chapter 1 > Article 28" applies_to_entities: - member_states topics: - data_protection keywords: - POS - data - processing - controller - controllers other than union institutions and bodies - union institutions and bodies contains: obligations: true prohibitions: false permissions: true definitions: true penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: - target: Article 15 - target: Article 16 external_references: [] recitals: - 89 - article_number: 29 article_title: Processor chunk_file: /eudpr/chunks/eudpr_t04_ch01_general_obligations.md path: "Title 4 > Chapter 1 > Article 29" applies_to_entities: - member_states topics: - data_protection - authorisation - liability - committee_procedure keywords: - authorisation - transfer - POS - data - ITS - personal data - processing - controller - processor - international organisation contains: obligations: true prohibitions: true permissions: true definitions: true penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: - target: Article 33 - target: Article 34 - target: Article 35 - target: Article 36 - target: Article 37 - target: Article 38 - target: Article 39 - target: Article 40 - target: Article 41 - target: Article 96 paragraph: "2" - target: Article 65 - target: Article 66 external_references: - instrument_type: regulation reference: "2016/679" - instrument_type: regulation reference: "2016/679" recitals: [] - article_number: 30 article_title: Processing under the authority of the controller or processor chunk_file: /eudpr/chunks/eudpr_t04_ch01_general_obligations.md path: "Title 4 > Chapter 1 > Article 30" applies_to_entities: - member_states topics: - data_protection keywords: - data - access - personal data - processing - controller - processor contains: obligations: true prohibitions: true permissions: false definitions: false penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: [] external_references: [] recitals: [] - article_number: 31 article_title: Records of processing activities chunk_file: /eudpr/chunks/eudpr_t04_ch01_general_obligations.md path: "Title 4 > Chapter 1 > Article 31" applies_to_entities: - member_states topics: - data_protection - security keywords: - transfer - POS - security - data - access - ITS - personal data - processing - controller - union institutions and bodies - processor - recipient - international organisation contains: obligations: true prohibitions: false permissions: false definitions: false penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: - target: Article 33 external_references: [] recitals: [] - article_number: 32 article_title: Cooperation with the European Data Protection Supervisor chunk_file: /eudpr/chunks/eudpr_t04_ch01_general_obligations.md path: "Title 4 > Chapter 1 > Article 32" applies_to_entities: [] topics: - data_protection keywords: - data - union institutions and bodies contains: obligations: true prohibitions: false permissions: false definitions: false penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: [] external_references: [] recitals: [] - article_number: 33 article_title: Security of processing chunk_file: /eudpr/chunks/eudpr_t04_ch02_security_of_personal_data.md path: "Title 4 > Chapter 2 > Article 33" applies_to_entities: [] topics: - data_protection - security - authorisation keywords: - POS - security - data - access - system - personal data - processing - pseudonymisation - controller - processor contains: obligations: true prohibitions: false permissions: true definitions: false penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: [] external_references: - instrument_type: regulation reference: "2016/679" recitals: [] - article_number: 34 article_title: Notification of a personal data breach to the European Data Protection Supervisor chunk_file: /eudpr/chunks/eudpr_t04_ch02_security_of_personal_data.md path: "Title 4 > Chapter 2 > Article 34" applies_to_entities: [] topics: - data_protection - security keywords: - POS - data - ITS - notification - personal data - controller - processor - personal data breach contains: obligations: true prohibitions: false permissions: true definitions: false penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: [] external_references: [] recitals: [] - article_number: 35 article_title: Communication of a personal data breach to the data subject chunk_file: /eudpr/chunks/eudpr_t04_ch02_security_of_personal_data.md path: "Title 4 > Chapter 2 > Article 35" applies_to_entities: [] topics: - data_protection - security - authorisation keywords: - data - access - personal data - controller - personal data breach contains: obligations: true prohibitions: true permissions: true definitions: false penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: - target: Article 34 paragraph: "3" external_references: [] recitals: [] - article_number: 36 article_title: Confidentiality of electronic communications chunk_file: /eudpr/chunks/eudpr_t04_ch03_confidentiality_of_electronic_communicat.md path: "Title 4 > Chapter 3 > Article 36" applies_to_entities: [] topics: - data_protection keywords: - network - union institutions and bodies - electronic communications network contains: obligations: true prohibitions: false permissions: false definitions: false penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: [] external_references: [] recitals: - 64 - article_number: 37 article_title: "Protection of information transmitted to, stored in, related to, processed by and collected from users’ terminal equipment" chunk_file: /eudpr/chunks/eudpr_t04_ch03_confidentiality_of_electronic_communicat.md path: "Title 4 > Chapter 3 > Article 37" applies_to_entities: [] topics: - data_protection keywords: - terminal - access - union institutions and bodies - user - terminal equipment contains: obligations: true prohibitions: false permissions: false definitions: false penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: [] external_references: - instrument_type: directive reference: "2002/58/EC" recitals: [] - article_number: 38 article_title: Directories of users chunk_file: /eudpr/chunks/eudpr_t04_ch03_confidentiality_of_electronic_communicat.md path: "Title 4 > Chapter 3 > Article 38" applies_to_entities: [] topics: - data_protection keywords: - POS - data - access - personal data - union institutions and bodies - user - directory contains: obligations: true prohibitions: false permissions: false definitions: false penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: [] external_references: [] recitals: [] - article_number: 39 article_title: Data protection impact assessment chunk_file: /eudpr/chunks/eudpr_t04_ch04_data_protection_impact_assessment_and_pr.md path: "Title 4 > Chapter 4 > Article 39" applies_to_entities: [] topics: - data_protection - consumer_protection - security keywords: - SCA - POS - security - data - access - system - personal data - processing - profiling - controller - controllers other than union institutions and bodies - union institutions and bodies - processor contains: obligations: true prohibitions: true permissions: true definitions: false penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: - target: Article 10 - target: Article 11 - target: Article 40 - target: Article 5 paragraph: "1" external_references: - instrument_type: regulation reference: "2016/679" recitals: [] - article_number: 40 article_title: Prior consultation chunk_file: /eudpr/chunks/eudpr_t04_ch04_data_protection_impact_assessment_and_pr.md path: "Title 4 > Chapter 4 > Article 40" applies_to_entities: [] topics: - data_protection - consumer_protection - authorisation - security - implementing_acts keywords: - authorisation - POS - security - data - personal data - processing - controller - processor contains: obligations: true prohibitions: false permissions: true definitions: true penalties: false delegated_powers: false implementing_powers: true rts_mandate: false its_mandate: false transitional: false internal_references: - target: Article 39 - target: Article 58 external_references: [] recitals: [] - article_number: 41 article_title: Information and consultation chunk_file: /eudpr/chunks/eudpr_t04_ch05_information_and_legislative_consultation.md path: "Title 4 > Chapter 5 > Article 41" applies_to_entities: [] topics: - data_protection - enforcement keywords: - data - personal data - processing - union institutions and bodies contains: obligations: true prohibitions: false permissions: false definitions: false penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: - target: Article 25 external_references: [] recitals: [] - article_number: 42 article_title: Legislative consultation chunk_file: /eudpr/chunks/eudpr_t04_ch05_information_and_legislative_consultation.md path: "Title 4 > Chapter 5 > Article 42" applies_to_entities: - european_commission topics: - data_protection - implementing_acts keywords: - POS - data - personal data - processing contains: obligations: true prohibitions: true permissions: true definitions: false penalties: false delegated_powers: true implementing_powers: true rts_mandate: false its_mandate: false transitional: false internal_references: [] external_references: - instrument_type: regulation reference: "2016/679" recitals: - 49 - article_number: 43 article_title: Designation of the data protection officer chunk_file: /eudpr/chunks/eudpr_t04_ch06_data_protection_officer.md path: "Title 4 > Chapter 6 > Article 43" applies_to_entities: [] topics: - data_protection - consumer_protection keywords: - data - union institutions and bodies contains: obligations: true prohibitions: false permissions: true definitions: false penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: - target: Article 45 external_references: [] recitals: [] - article_number: 44 article_title: Position of the data protection officer chunk_file: /eudpr/chunks/eudpr_t04_ch06_data_protection_officer.md path: "Title 4 > Chapter 6 > Article 44" applies_to_entities: [] topics: - data_protection - consumer_protection keywords: - POS - data - access - consent - personal data - processing - controller - union institutions and bodies - processor contains: obligations: true prohibitions: true permissions: true definitions: false penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: - target: Article 45 external_references: [] recitals: [] - article_number: 45 article_title: Tasks of the data protection officer chunk_file: /eudpr/chunks/eudpr_t04_ch06_data_protection_officer.md path: "Title 4 > Chapter 6 > Article 45" applies_to_entities: [] topics: - data_protection - consumer_protection keywords: - data - ITS - notification - personal data - processing - controller - processor - personal data breach contains: obligations: true prohibitions: false permissions: true definitions: false penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: - target: Article 34 - target: Article 35 - target: Article 39 - target: Article 40 external_references: [] recitals: - 64 - article_number: 46 article_title: General principle for transfers chunk_file: /eudpr/chunks/eudpr_t05_transfers_of_personal_data_to_third_coun.md path: "Title 5 > Article 46" applies_to_entities: [] topics: - data_protection keywords: - transfer - data - personal data - processing - controller - processor - international organisation contains: obligations: true prohibitions: false permissions: false definitions: false penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: [] external_references: [] recitals: [] - article_number: 47 article_title: Transfers on the basis of an adequacy decision chunk_file: /eudpr/chunks/eudpr_t05_transfers_of_personal_data_to_third_coun.md path: "Title 5 > Article 47" applies_to_entities: - european_commission topics: - data_protection keywords: - transfer - data - personal data - controller - union institutions and bodies - international organisation contains: obligations: true prohibitions: false permissions: true definitions: false penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: [] external_references: - instrument_type: regulation reference: "2016/679" - instrument_type: directive reference: "2016/680" - instrument_type: regulation reference: "2016/679" - instrument_type: regulation reference: "2016/679" - instrument_type: directive reference: "2016/680" recitals: [] - article_number: 48 article_title: Transfers subject to appropriate safeguards chunk_file: /eudpr/chunks/eudpr_t05_transfers_of_personal_data_to_third_coun.md path: "Title 5 > Article 48" applies_to_entities: - european_commission topics: - data_protection - authorisation - committee_procedure keywords: - authorisation - transfer - data - personal data - controller - union institutions and bodies - processor - recipient - international organisation contains: obligations: true prohibitions: false permissions: true definitions: false penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: - target: Article 96 paragraph: "2" external_references: - instrument_type: regulation reference: "2016/679" - instrument_type: directive reference: "2016/680" - instrument_type: regulation reference: "2016/679" recitals: [] - article_number: 49 article_title: Transfers or disclosures not authorised by Union law chunk_file: /eudpr/chunks/eudpr_t05_transfers_of_personal_data_to_third_coun.md path: "Title 5 > Article 49" applies_to_entities: [] topics: - data_protection - authorisation keywords: - transfer - data - personal data - controller - processor contains: obligations: false prohibitions: false permissions: true definitions: false penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: [] external_references: [] recitals: [] - article_number: 50 article_title: Derogations for specific situations chunk_file: /eudpr/chunks/eudpr_t05_transfers_of_personal_data_to_third_coun.md path: "Title 5 > Article 50" applies_to_entities: [] topics: - data_protection - authorisation keywords: - transfer - POS - data - consent - ITS - personal data - controller - union institutions and bodies - recipient - international organisation contains: obligations: true prohibitions: true permissions: true definitions: false penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: - target: Article 48 external_references: - instrument_type: regulation reference: "2016/679" - instrument_type: directive reference: "2016/680" recitals: [] - article_number: 51 article_title: International cooperation for the protection of personal data chunk_file: /eudpr/chunks/eudpr_t05_transfers_of_personal_data_to_third_coun.md path: "Title 5 > Article 51" applies_to_entities: - european_commission topics: - data_protection keywords: - data - notification - personal data - international organisation contains: obligations: true prohibitions: false permissions: false definitions: false penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: [] external_references: [] recitals: - 72 - article_number: 52 article_title: European Data Protection Supervisor chunk_file: /eudpr/chunks/eudpr_t06_european_data_protection_supervisor.md path: "Title 6 > Article 52" applies_to_entities: [] topics: - data_protection - consumer_protection keywords: - data - personal data - processing - union institutions and bodies contains: obligations: true prohibitions: false permissions: false definitions: false penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: - target: Article 57 - target: Article 58 external_references: [] recitals: [] - article_number: 53 article_title: Appointment of the European Data Protection Supervisor chunk_file: /eudpr/chunks/eudpr_t06_european_data_protection_supervisor.md path: "Title 6 > Article 53" applies_to_entities: - european_commission topics: - data_protection - consumer_protection keywords: - data - ITS contains: obligations: true prohibitions: false permissions: true definitions: false penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: - target: Article 11 - target: Article 12 - target: Article 13 - target: Article 14 external_references: [] recitals: [] - article_number: 54 article_title: "Regulations and general conditions governing the performance of the European Data Protection Supervisor’s duties, staff and financial resources" chunk_file: /eudpr/chunks/eudpr_t06_european_data_protection_supervisor.md path: "Title 6 > Article 54" applies_to_entities: [] topics: - data_protection - consumer_protection keywords: - SEPA - data contains: obligations: true prohibitions: false permissions: false definitions: false penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: [] external_references: - instrument_type: regulation reference: "2016/679" recitals: [] - article_number: 55 article_title: Independence chunk_file: /eudpr/chunks/eudpr_t06_european_data_protection_supervisor.md path: "Title 6 > Article 55" applies_to_entities: [] topics: - data_protection - consumer_protection keywords: - data - ITS contains: obligations: true prohibitions: true permissions: false definitions: false penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: [] external_references: [] recitals: [] - article_number: 56 article_title: Professional secrecy chunk_file: /eudpr/chunks/eudpr_t06_european_data_protection_supervisor.md path: "Title 6 > Article 56" applies_to_entities: [] topics: - data_protection - consumer_protection keywords: - data contains: obligations: true prohibitions: false permissions: false definitions: false penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: [] external_references: [] recitals: [] - article_number: 57 article_title: Tasks chunk_file: /eudpr/chunks/eudpr_t06_european_data_protection_supervisor.md path: "Title 6 > Article 57" applies_to_entities: - competent_authorities topics: - data_protection - consumer_protection - authorisation - enforcement keywords: - data - ITS - personal data - processing - controller - union institutions and bodies - processor contains: obligations: true prohibitions: false permissions: true definitions: true penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: - target: Article 67 - target: Article 29 paragraph: "8" - target: Article 48 paragraph: "2" - target: Article 39 paragraph: "4" - target: Article 40 paragraph: "2" - target: Article 48 paragraph: "3" - target: Article 58 paragraph: "2" external_references: - instrument_type: regulation reference: "2016/679" recitals: [] - article_number: 58 article_title: Powers chunk_file: /eudpr/chunks/eudpr_t06_european_data_protection_supervisor.md path: "Title 6 > Article 58" applies_to_entities: - member_states - european_commission topics: - data_protection - consumer_protection - authorisation - enforcement - implementing_acts keywords: - authorisation - POS - data - access - ITS - notification - personal data - processing - restriction of processing - controller - union institutions and bodies - processor - recipient - personal data breach - international organisation contains: obligations: true prohibitions: false permissions: false definitions: true penalties: true delegated_powers: false implementing_powers: true rts_mandate: false its_mandate: false transitional: false internal_references: - target: Article 18 - target: Article 19 - target: Article 20 - target: Article 19 paragraph: "2" - target: Article 21 - target: Article 66 - target: Article 40 - target: Article 41 paragraph: "2" - target: Article 29 paragraph: "8" - target: Article 48 paragraph: "2" - target: Article 48 paragraph: "3" - target: Article 40 paragraph: "4" external_references: [] recitals: [] - article_number: 59 article_title: Obligation of controllers and processors to react to allegations chunk_file: /eudpr/chunks/eudpr_t06_european_data_protection_supervisor.md path: "Title 6 > Article 59" applies_to_entities: [] topics: - data_protection - consumer_protection keywords: - data - ITS - controller - processor contains: obligations: true prohibitions: false permissions: false definitions: false penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: - target: Article 58 paragraph: "2" external_references: [] recitals: [] - article_number: 60 article_title: Activities report chunk_file: /eudpr/chunks/eudpr_t06_european_data_protection_supervisor.md path: "Title 6 > Article 60" applies_to_entities: - european_commission topics: - data_protection - consumer_protection keywords: - POS - data - union institutions and bodies contains: obligations: true prohibitions: false permissions: true definitions: false penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: [] external_references: [] recitals: [] - article_number: 61 article_title: Cooperation between the European Data Protection Supervisor and national supervisory authorities chunk_file: /eudpr/chunks/eudpr_t07_cooperation_and_consistency.md path: "Title 7 > Article 61" applies_to_entities: - competent_authorities topics: - data_protection keywords: - data contains: obligations: true prohibitions: false permissions: false definitions: false penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: [] external_references: [] recitals: [] - article_number: 62 article_title: Coordinated supervision by the European Data Protection Supervisor and national supervisory authorities chunk_file: /eudpr/chunks/eudpr_t07_cooperation_and_consistency.md path: "Title 7 > Article 62" applies_to_entities: - competent_authorities - european_commission topics: - data_protection keywords: - SCA - supervision - POS - data - system - ITS contains: obligations: true prohibitions: false permissions: true definitions: false penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: [] external_references: [] recitals: [] - article_number: 63 article_title: Right to lodge a complaint with the European Data Protection Supervisor chunk_file: /eudpr/chunks/eudpr_t08_remedies_liability_and_penalties.md path: "Title 8 > Article 63" applies_to_entities: [] topics: - data_protection - liability - enforcement - sanctions keywords: - POS - data - personal data - processing contains: obligations: true prohibitions: false permissions: true definitions: false penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: - target: Article 64 external_references: [] recitals: [] - article_number: 64 article_title: Right to an effective judicial remedy chunk_file: /eudpr/chunks/eudpr_t08_remedies_liability_and_penalties.md path: "Title 8 > Article 64" applies_to_entities: [] topics: - data_protection - liability - enforcement - sanctions keywords: - data - ITS contains: obligations: true prohibitions: false permissions: true definitions: false penalties: true delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: - target: Article 63 paragraph: "3" - target: Article 66 external_references: [] recitals: [] - article_number: 65 article_title: Right to compensation chunk_file: /eudpr/chunks/eudpr_t08_remedies_liability_and_penalties.md path: "Title 8 > Article 65" applies_to_entities: [] topics: - data_protection - liability - enforcement - sanctions keywords: [] contains: obligations: true prohibitions: false permissions: true definitions: false penalties: true delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: [] external_references: [] recitals: [] - article_number: 66 article_title: Administrative fines chunk_file: /eudpr/chunks/eudpr_t08_remedies_liability_and_penalties.md path: "Title 8 > Article 66" applies_to_entities: [] topics: - data_protection - liability - enforcement - sanctions keywords: - transfer - POS - data - access - consent - personal data - processing - union institutions and bodies - recipient - international organisation contains: obligations: true prohibitions: true permissions: true definitions: false penalties: true delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: - target: Article 58 paragraph: "2" - target: Article 27 - target: Article 33 - target: Article 58 - target: Article 69 - target: Article 8 - target: Article 12 - target: Article 28 - target: Article 29 - target: Article 30 - target: Article 31 - target: Article 32 - target: Article 34 - target: Article 35 - target: Article 4 - target: Article 5 - target: Article 7 - target: Article 10 - target: Article 14 - target: Article 15 - target: Article 16 - target: Article 17 - target: Article 18 - target: Article 19 - target: Article 20 - target: Article 21 - target: Article 22 - target: Article 23 - target: Article 24 - target: Article 46 - target: Article 47 - target: Article 48 - target: Article 49 - target: Article 50 external_references: [] recitals: [] - article_number: 67 article_title: Representation of data subjects chunk_file: /eudpr/chunks/eudpr_t08_remedies_liability_and_penalties.md path: "Title 8 > Article 67" applies_to_entities: - member_states topics: - data_protection - liability - enforcement - sanctions keywords: - data - personal data contains: obligations: true prohibitions: false permissions: true definitions: false penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: - target: Article 63 - target: Article 64 - target: Article 65 external_references: [] recitals: [] - article_number: 68 article_title: Complaints by Union staff chunk_file: /eudpr/chunks/eudpr_t08_remedies_liability_and_penalties.md path: "Title 8 > Article 68" applies_to_entities: [] topics: - data_protection - liability - enforcement - sanctions keywords: - data contains: obligations: true prohibitions: false permissions: true definitions: false penalties: true delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: [] external_references: [] recitals: [] - article_number: 69 article_title: Sanctions chunk_file: /eudpr/chunks/eudpr_t08_remedies_liability_and_penalties.md path: "Title 8 > Article 69" applies_to_entities: [] topics: - data_protection - liability - enforcement - sanctions keywords: - sanction contains: obligations: true prohibitions: false permissions: false definitions: false penalties: true delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: [] external_references: [] recitals: [] - article_number: 70 article_title: Scope of the Chapter chunk_file: /eudpr/chunks/eudpr_t09_processing_of_operational_personal_data_.md path: "Title 9 > Article 70" applies_to_entities: [] topics: - data_protection - operational_resilience - scope keywords: - data - personal data - operational personal data - processing contains: obligations: false prohibitions: false permissions: false definitions: false penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: [] external_references: [] recitals: [] - article_number: 71 article_title: Principles relating to processing of operational personal data chunk_file: /eudpr/chunks/eudpr_t09_processing_of_operational_personal_data_.md path: "Title 9 > Article 71" applies_to_entities: [] topics: - data_protection - operational_resilience - scope - authorisation - liability keywords: - POS - security - data - ITS - personal data - operational personal data - processing - controller contains: obligations: true prohibitions: false permissions: true definitions: false penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: [] external_references: [] recitals: [] - article_number: 72 article_title: Lawfulness of processing of operational personal data chunk_file: /eudpr/chunks/eudpr_t09_processing_of_operational_personal_data_.md path: "Title 9 > Article 72" applies_to_entities: [] topics: - data_protection - operational_resilience - scope keywords: - POS - data - ITS - personal data - operational personal data - processing contains: obligations: true prohibitions: false permissions: false definitions: false penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: [] external_references: [] recitals: [] - article_number: 73 article_title: Distinction between different categories of data subjects chunk_file: /eudpr/chunks/eudpr_t09_processing_of_operational_personal_data_.md path: "Title 9 > Article 73" applies_to_entities: [] topics: - data_protection - operational_resilience - scope keywords: - POS - data - personal data - operational personal data - controller contains: obligations: true prohibitions: false permissions: false definitions: false penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: [] external_references: [] recitals: [] - article_number: 74 article_title: Distinction between operational personal data and verification of the quality of operational personal data chunk_file: /eudpr/chunks/eudpr_t09_processing_of_operational_personal_data_.md path: "Title 9 > Article 74" applies_to_entities: - competent_authorities topics: - data_protection - operational_resilience - scope keywords: - POS - data - personal data - operational personal data - processing - controller - competent authority - recipient contains: obligations: true prohibitions: false permissions: false definitions: false penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: - target: Article 82 external_references: [] recitals: [] - article_number: 75 article_title: Specific processing conditions chunk_file: /eudpr/chunks/eudpr_t09_processing_of_operational_personal_data_.md path: "Title 9 > Article 75" applies_to_entities: - competent_authorities topics: - data_protection - operational_resilience - scope keywords: - data - personal data - operational personal data - processing - controller - competent authority - recipient contains: obligations: true prohibitions: false permissions: false definitions: false penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: [] external_references: - instrument_type: directive reference: "2016/680" recitals: - 61 - article_number: 76 article_title: Processing of special categories of operational personal data chunk_file: /eudpr/chunks/eudpr_t09_processing_of_operational_personal_data_.md path: "Title 9 > Article 76" applies_to_entities: [] topics: - data_protection - operational_resilience - scope keywords: - POS - biometric - data - personal data - operational personal data - processing - genetic data - biometric data - data concerning health contains: obligations: true prohibitions: true permissions: true definitions: false penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: [] external_references: [] recitals: [] - article_number: 77 article_title: "Automated individual decision-making, including profiling" chunk_file: /eudpr/chunks/eudpr_t09_processing_of_operational_personal_data_.md path: "Title 9 > Article 77" applies_to_entities: [] topics: - data_protection - operational_resilience - scope - authorisation keywords: - data - personal data - processing - profiling - controller contains: obligations: true prohibitions: true permissions: false definitions: false penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: - target: Article 76 external_references: [] recitals: [] - article_number: 78 article_title: Communication and modalities for exercising the rights of the data subject chunk_file: /eudpr/chunks/eudpr_t09_processing_of_operational_personal_data_.md path: "Title 9 > Article 78" applies_to_entities: [] topics: - data_protection - operational_resilience - scope keywords: - data - access - processing - controller contains: obligations: true prohibitions: false permissions: true definitions: true penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: - target: Article 79 - target: Article 80 - target: Article 81 - target: Article 82 - target: Article 83 - target: Article 84 external_references: [] recitals: [] - article_number: 79 article_title: Information to be made available or given to the data subject chunk_file: /eudpr/chunks/eudpr_t09_processing_of_operational_personal_data_.md path: "Title 9 > Article 79" applies_to_entities: - member_states topics: - data_protection - operational_resilience - scope keywords: - POS - security - data - access - personal data - operational personal data - processing - restriction of processing - controller - recipient - international organisation contains: obligations: true prohibitions: false permissions: true definitions: false penalties: true delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: [] external_references: [] recitals: [] - article_number: 80 article_title: Right of access by the data subject chunk_file: /eudpr/chunks/eudpr_t09_processing_of_operational_personal_data_.md path: "Title 9 > Article 80" applies_to_entities: [] topics: - data_protection - operational_resilience - scope keywords: - POS - data - access - personal data - operational personal data - processing - restriction of processing - controller - recipient - international organisation contains: obligations: true prohibitions: false permissions: true definitions: false penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: [] external_references: [] recitals: [] - article_number: 81 article_title: Limitations to the right of access chunk_file: /eudpr/chunks/eudpr_t09_processing_of_operational_personal_data_.md path: "Title 9 > Article 81" applies_to_entities: - member_states topics: - data_protection - operational_resilience - scope keywords: - POS - security - data - access - controller contains: obligations: true prohibitions: false permissions: true definitions: false penalties: true delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: [] external_references: [] recitals: [] - article_number: 82 article_title: Right to rectification or erasure of operational personal data and restriction of processing chunk_file: /eudpr/chunks/eudpr_t09_processing_of_operational_personal_data_.md path: "Title 9 > Article 82" applies_to_entities: - member_states - competent_authorities topics: - data_protection - operational_resilience - scope keywords: - POS - security - data - personal data - operational personal data - processing - restriction of processing - controller - competent authority - recipient contains: obligations: true prohibitions: false permissions: true definitions: true penalties: true delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: - target: Article 71 - target: Article 72 - target: Article 76 external_references: [] recitals: [] - article_number: 83 article_title: Right of access in criminal investigations and proceedings chunk_file: /eudpr/chunks/eudpr_t09_processing_of_operational_personal_data_.md path: "Title 9 > Article 83" applies_to_entities: - member_states - competent_authorities topics: - data_protection - operational_resilience - scope keywords: - data - access - personal data - operational personal data - competent authority contains: obligations: true prohibitions: false permissions: false definitions: false penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: [] external_references: [] recitals: [] - article_number: 84 article_title: Exercise of rights by the data subject and verification by the European Data Protection Supervisor chunk_file: /eudpr/chunks/eudpr_t09_processing_of_operational_personal_data_.md path: "Title 9 > Article 84" applies_to_entities: [] topics: - data_protection - operational_resilience - scope keywords: - POS - data - controller contains: obligations: true prohibitions: false permissions: true definitions: false penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: - target: Article 79 - target: Article 81 - target: Article 82 external_references: [] recitals: [] - article_number: 85 article_title: Data protection by design and by default chunk_file: /eudpr/chunks/eudpr_t09_processing_of_operational_personal_data_.md path: "Title 9 > Article 85" applies_to_entities: [] topics: - data_protection - operational_resilience - scope keywords: - POS - data - access - ITS - personal data - operational personal data - processing - pseudonymisation - controller contains: obligations: true prohibitions: false permissions: false definitions: true penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: [] external_references: [] recitals: [] - article_number: 86 article_title: Joint controllers chunk_file: /eudpr/chunks/eudpr_t09_processing_of_operational_personal_data_.md path: "Title 9 > Article 86" applies_to_entities: - member_states topics: - data_protection - operational_resilience - scope keywords: - POS - data - processing - controller - controllers other than union institutions and bodies - union institutions and bodies contains: obligations: true prohibitions: false permissions: true definitions: true penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: - target: Article 79 external_references: [] recitals: [] - article_number: 87 article_title: Processor chunk_file: /eudpr/chunks/eudpr_t09_processing_of_operational_personal_data_.md path: "Title 9 > Article 87" applies_to_entities: - member_states topics: - data_protection - operational_resilience - scope - authorisation keywords: - authorisation - POS - data - personal data - operational personal data - processing - controller - processor contains: obligations: true prohibitions: true permissions: false definitions: true penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: [] external_references: [] recitals: [] - article_number: 88 article_title: Logging chunk_file: /eudpr/chunks/eudpr_t09_processing_of_operational_personal_data_.md path: "Title 9 > Article 88" applies_to_entities: [] topics: - data_protection - operational_resilience - scope keywords: - transfer - POS - security - data - access - system - ITS - personal data - operational personal data - processing - controller - recipient contains: obligations: true prohibitions: false permissions: false definitions: false penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: [] external_references: [] recitals: [] - article_number: 89 article_title: Data protection impact assessment chunk_file: /eudpr/chunks/eudpr_t09_processing_of_operational_personal_data_.md path: "Title 9 > Article 89" applies_to_entities: [] topics: - data_protection - operational_resilience - scope - security keywords: - POS - security - data - personal data - operational personal data - processing - controller contains: obligations: true prohibitions: false permissions: false definitions: false penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: [] external_references: [] recitals: [] - article_number: 90 article_title: Prior consultation of the European Data Protection Supervisor chunk_file: /eudpr/chunks/eudpr_t09_processing_of_operational_personal_data_.md path: "Title 9 > Article 90" applies_to_entities: [] topics: - data_protection - operational_resilience - scope keywords: - data - system - personal data - operational personal data - processing - filing system - controller contains: obligations: true prohibitions: false permissions: true definitions: false penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: - target: Article 89 external_references: [] recitals: [] - article_number: 91 article_title: Security of processing of operational personal data chunk_file: /eudpr/chunks/eudpr_t09_processing_of_operational_personal_data_.md path: "Title 9 > Article 91" applies_to_entities: [] topics: - data_protection - operational_resilience - scope - authorisation keywords: - liability - authorisation - transfer - POS - security - data - access - system - personal data - operational personal data - processing - controller - processor - user contains: obligations: true prohibitions: false permissions: true definitions: true penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: [] external_references: [] recitals: [] - article_number: 92 article_title: Notification of a personal data breach to the European Data Protection Supervisor chunk_file: /eudpr/chunks/eudpr_t09_processing_of_operational_personal_data_.md path: "Title 9 > Article 92" applies_to_entities: - competent_authorities topics: - data_protection - operational_resilience - scope keywords: - POS - data - ITS - notification - personal data - operational personal data - controller - personal data breach contains: obligations: true prohibitions: false permissions: true definitions: false penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: [] external_references: [] recitals: [] - article_number: 93 article_title: Communication of a personal data breach to the data subject chunk_file: /eudpr/chunks/eudpr_t09_processing_of_operational_personal_data_.md path: "Title 9 > Article 93" applies_to_entities: [] topics: - data_protection - operational_resilience - scope - authorisation keywords: - data - access - personal data - operational personal data - controller - personal data breach contains: obligations: true prohibitions: true permissions: true definitions: false penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: - target: Article 92 paragraph: "2" - target: Article 79 paragraph: "3" external_references: [] recitals: [] - article_number: 94 article_title: Transfer of operational personal data to third countries and international organisations chunk_file: /eudpr/chunks/eudpr_t09_processing_of_operational_personal_data_.md path: "Title 9 > Article 94" applies_to_entities: - european_commission topics: - data_protection - operational_resilience - scope keywords: - transfer - data - privacy - ITS - personal data - operational personal data - processing - controller - international organisation contains: obligations: true prohibitions: false permissions: true definitions: false penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: [] external_references: - instrument_type: directive reference: "2016/680" recitals: [] - article_number: 95 article_title: Secrecy of judicial inquiries and criminal proceedings chunk_file: /eudpr/chunks/eudpr_t09_processing_of_operational_personal_data_.md path: "Title 9 > Article 95" applies_to_entities: - member_states topics: - data_protection - operational_resilience - scope keywords: - supervision - data contains: obligations: false prohibitions: false permissions: true definitions: false penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: [] external_references: [] recitals: [] - article_number: 96 article_title: Committee procedure chunk_file: /eudpr/chunks/eudpr_t10_implementing_acts.md path: "Title 10 > Article 96" applies_to_entities: [] topics: - data_protection - committee_procedure keywords: [] contains: obligations: true prohibitions: false permissions: false definitions: false penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: [] external_references: - instrument_type: regulation reference: "2016/679" recitals: [] - article_number: 97 article_title: Review clause chunk_file: /eudpr/chunks/eudpr_t11_review.md path: "Title 11 > Article 97" applies_to_entities: - european_commission topics: - data_protection keywords: - POS contains: obligations: true prohibitions: false permissions: false definitions: false penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: [] external_references: [] recitals: [] - article_number: 98 article_title: Review of Union legal acts chunk_file: /eudpr/chunks/eudpr_t11_review.md path: "Title 11 > Article 98" applies_to_entities: - competent_authorities - european_commission topics: - data_protection keywords: - POS - data - personal data - operational personal data - processing contains: obligations: true prohibitions: false permissions: true definitions: false penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: [] external_references: - instrument_type: directive reference: "2016/680" recitals: [] - article_number: 99 article_title: Repeal of Regulation (EC) No 45/2001 and of Decision No 1247/2002/EC chunk_file: /eudpr/chunks/eudpr_t12_final_provisions.md path: "Title 12 > Article 99" applies_to_entities: [] topics: - data_protection - final_provisions keywords: [] contains: obligations: true prohibitions: false permissions: false definitions: false penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: false internal_references: [] external_references: [] recitals: [] - article_number: 100 article_title: Transitional measures chunk_file: /eudpr/chunks/eudpr_t12_final_provisions.md path: "Title 12 > Article 100" applies_to_entities: [] topics: - data_protection - final_provisions keywords: - data contains: obligations: true prohibitions: true permissions: false definitions: false penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: true internal_references: - target: Article 53 paragraph: "4" - target: Article 53 paragraph: "5" - target: Article 53 paragraph: "7" - target: Article 55 - target: Article 56 external_references: [] recitals: [] - article_number: 101 article_title: Entry into force and application chunk_file: /eudpr/chunks/eudpr_t12_final_provisions.md path: "Title 12 > Article 101" applies_to_entities: [] topics: - data_protection - final_provisions keywords: - data - ITS - personal data - processing contains: obligations: true prohibitions: false permissions: false definitions: false penalties: false delegated_powers: false implementing_powers: false rts_mandate: false its_mandate: false transitional: true internal_references: [] external_references: [] recitals: []