| Accredited body which has an appropriate level of expertise in relation to the subject-matter of the code of conduct |
| Accredited controller or processor in third country |
| Administrative authority of a third country |
| All subjects |
| Associations and other bodies representing Controllers or Processors |
| Authorities designated by the Member State |
| Board |
| Certification body |
| Chair of the Board |
| Child |
| Church and religious association or community established in the EU |
| Commission |
| Competent authority |
| Complainant |
| Controller |
| Controller in the EU |
| Controller not established in the EU |
| Controller that is not subject to this Regulation |
| Council |
| Court |
| Court of a third country |
| Court of the Member State |
| Data protection officer |
| Data subject |
| Data subject in the Union |
| Deputy Chair of the Board |
| Employee |
| European Data Protection Board |
| European Data Protection Supervisor |
| European Parliament |
| European Union |
| European Union institutions, bodies, offices and agencies |
| Government of the Member State |
| Group of enterprises engaged in a joint economic activity |
| Group of undertakings |
| Head of State of the Member State |
| Holder of parental responsibly over the child |
| Independent body entrusted with the appointment under Member State law |
| International organisation |
| Joint Controller |
| Joint representative of the supervisory authorities |
| Judicial authority of the Member State |
| Lead supervisory authority |
| Legal person |
| Legal person established in the EU |
| Member of the Board |
| Member state |
| Member State in whose territory the damage was caused |
| Member State of the seconding supervisory authority whose staff has caused damage |
| Members of the supervisory authority |
| National accreditation body |
| National parliament of the Member State |
| Natural person |
| Natural person acting under the authority of the controller or the processor |
| Not-for-profit body, organisation or association established in the EU |
| Official authority |
| Person acting under the authority of the controller or of the processor |
| Person subjected to an obligation of secrecy |
| Person who has suffered material or non-material damage as a result of an infringement of this Regulation |
| Personnel having permanent or regular access to personal data |
| Persons having a legitimate interest |
| Private body |
| Processor |
| Processor in the EU |
| Processor not established in the EU |
| Processor that is not subject to this Regulation |
| Provider of the information society services |
| Public |
| Public agency |
| Public authority |
| Public body |
| Recipient |
| Representative of a data subject |
| Representative of the Controller |
| Representative of the Processor |
| Requested supervisory authority |
| Requesting supervisory authority |
| Seconding supervisory authority's members or staff |
| Secretariat of the Board |
| Staff of the European Data Protection Supervisor |
| Supervisory authority |
| Third country |
| Third party |
