General Data Protection Regulation (GDPR) - Regulations



Name of regulation
Subject-matter (Article 1)
Aim of the regulation (Article 1)
Free movement of personal data (Article 1)
Positive definition of the material scope (Article 2)
Negative definition of the material scope (Article 2)
Processing of personal data by the Union institutions, bodies, offices and agencies (Article 2)
Application of Directive 2000/31/EC (Article 2)
Territorial scope for the EU subjects (Article 3)
Territorial scope for the non-EU subjects (Article 3)
Territorial scope for the place under the law of the member state (Article 3)
Personal data (Article 4)
Processing (Article 4)
Restriction of processing (Article 4)
Profiling (Article 4)
Pseudonymization (Article 4)
Filling system (Article 4)
Controller (Article 4)
Processor (Article 4)
Recipient (Article 4)
Third party (Article 4)
Consent (Article 4)
Personal data breach (Article 4)
Genetic data (Article 4)
Biometric data (Article 4)
Data concerning health (Article 4)
Main establishment (Article 4)
Representative (Article 4)
Enterprise (Article 4)
Group of undertakings (Article 4)
Binding corporate rules (Article 4)
Supervisory authority (Article 4)
Supervisory authority concerned (Article 4)
Cross-border processing (Article 4)
Relevant and reasoned objection (Article 4)
Information society service (Article 4)
International organization (Article 4)
Principle of lawfulness, fairness and transparency (Article 5)
Purpose limitation principle (Article 5)
Data minimization principle (Article 5)
Principle of accuracy (Article 5)
Storage limitation principle (Article 5)
Principle of integrity and confidentiality (Article 5)
Principle of accountability (Article 5)
Consent of the data subject (Article 6)
Performance of a contract (Article 6)
Compliance with a legal obligation (Article 6)
To protect the vital interests of the data subject or of another natural person (Article 6)
Performance of a task carried out in the public interest (Article 6)
Purposes of the legitimate interests pursued by the controller or by a third party (Article 6)
Implementation of the particular requirements for the processing in terms of the paragraph 1, points c) and e) of the regulation (Article 6)
Basis for the processing referred to in point (c) and (e) of paragraph 1 (Article 6)
Processing for a purpose other than that for which the personal data have been collected (Article 6)
Obligation to demonstrate the consent for processing the personal data (Article 7)
Transparency of the consent for personal data processing (Article 7)
The right to withdraw his or her consent at any time (Article 7)
Assessing the consent given (Article 7)
Requirements for the information society services in context of the child (Article 8)
Obligations of the controller on context of the child when processing the personal data (Article 8)
Restrictions in terms of the article 8, paragraph 1 of the regulation (Article 8)
Prohibition of processing the special categories of personal data (Article 9)
Exclusions from the prohibition of processing the special categories of personal data (Article 9)
Provisions to the processing of special categories of personal data in terms of the paragraph 2, point h) of the regulation (Article 9)
Further conditions regarding the processing of genetic data, biometric data or data concerning health (Article 9)
Processing of personal data relating to criminal convictions and offences (Article 10)
Exemption from the obligation to maintain, acquire or process additional information in order to identify the data subject (Article 11)
Reasons for derogations of exercising the articles 15 – 20 of the regulation (Article 11)
Measures of the controller in terms of providing information to data subjects. (Article 12)
Facilitating the data subject rights exercising under the Articles 15 to 22 (Article 12)
Providing the information on action taken on a request under Articles 15 to 22 to the data subject (Article 12)
Obligations of the controller when the data subject request is unadopted (Article 12)
Rights of the controller in context of the inappropriate requests from the data subject (Article 12)
Additional information claims from the controller (Article 12)
Providing the information in terms of Articles 13 and 14 (Article 12)
The right of the Commission to act in terms of the Article 92 of the regulation (Article 12)
Information provided to the data subject when personal data has been acquired from a data subject (Article 13)
Additional information provided to the data subject when personal data has been acquired from a data subject (Article 13)
Information provided to the data subject when controller intends to further process the personal data for a purpose other than that for which the personal data were collected (Article 13)
Exemption from exercising the paragraphs 1 – 3, Article 13 of the regulation (Article 13)
Information provided where personal data have not been obtained from the data subject (Article 14)
Some additional information provided where personal data have not been obtained from the data subject (Article 14)
Principles of providing the information in terms of the Article 14, paragraph 1 and 2 of the regulation (Article 14)
Providing the information where the controller intends to further process the personal data for a purpose other than that for which the personal data were obtained (Article 14)
Exemptions from the obligation of the controller to provide information in terms of the Article 14, paragraphs 1 – 4 of the regulation (Article 14)
Right of the data subject to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed (Article 15)
Right to be informed of the appropriate safeguards pursuant to Article 46 relating to the transfer (Article 15)
Obligation to provide a copy of the personal data undergoing processing (Article 15)
Limitation of the negative implications regarding the the right to obtain a copy referred to in paragraph 3 of the regulation (Article 15)
Right to rectification (Article 16)
Reason for eligibility to exercise the right to be forgotten (Article 17)
Obligations of the controller when the right to be forgotten has been applied (Article 17)
Exemptions from exercising the Article 17, paragraph 1 and 2 of the regulation (Article 17)
Restraining the personal data processing (Article 18)
Processing of the personal data after the application of the right to restriction of processing (Article 18)
Obligation of the controller regarding the processing limitation (Article 18)
Information obligation of the controller towards the recipients (Article 19)
Right to data portability (Article 20)
Portability of the personal data from one controller to another (Article 20)
Limitation of the right to obtain the personal data (Article 20)
Limitation of the negative implications in context of the other subjects rights (Article 20)
Right to object (Article 21)
Right to object on case of the direct marketing purposes (Article 21)
Prohibition of the personal data processing after the Article 21, paragraph 2 application (Article 21)
Obligation to inform the data subject in context of the right to object (Article 21)
Application of the right to object using the automated services (Article 21)
Right to object in context of the personal data processing for the purposes of scientific, historical or statistical reasons (Article 21)
Right not to be subject to a decision based solely on automated processing (Article 22)
Restriction of the Article 22, paragraph 1 application (Article 22)
Proceedings of the controller in case of the Article 22, paragraph 2, points a) – c) application (Article 22)
Decisions referred to in Article 22, paragraph 2 of the regulation (Article 22)
Restrictions of the scope of rights and obligations settled in the Articles 12 – 22, 34 and 5 of the regulation (Article 23)
Minimum scope of the individual provisions in terms of the Article 23, paragraph 1 of the regulation (Article 23)
Responsibilities of the controller in personal data processing (Article 24)
Implementation of appropriate data protection policies by the controller (Article 24)
Obligations fulfillment by the controller (Article 24)
Implementation of the appropriate technical and organisational measures (Article 25)
Processing of the personal data “by default” (Article 25)
Approved certification mechanism pursuant to Article 42 (Article 25)
Personal data processing by the joint controllers (Article 26)
Respective roles and relationships of the joint controllers vis-à-vis the data subjects (Article 26)
Exercising his or her rights under this Regulation in respect of and against each of the controllers (Article 26)
Designation of the representative in the Union (Article 27)
Limitation of applying the obligations in terms of Article 27, paragraph 1 of the regulation (Article 27)
Assignation of the place of activity of the controller outside the EU (Article 27)
Delegation scope of the controller or processor (Article 27)
Legal instruments of remedies against the controller or processor (Article 27)
Guaranties of the processor for implementing the adequate measurements (Article 28)
Conditions for engagement of the other processor to data processing (Article 28)
Minimal scope of the contract essentials between the Controller and Processor (Article 28)
Designation of the identical scope of the responsibilities fot the other processor (Article 28)
Certification mechanism as referred to in Article 42 of the processor (Article 28)
Standard contract clauses between the Controller and Processor (Article 28)
Setting the standard contract clauses settled by the Commission (Article 28)
Standard contractual clauses settled by the supervisory authority (Article 28)
Contract or other legal document in terms of the Article 28, paragraphs 3 and 4 of the regulation (Article 28)
Consequences of misconducting the purposes and instruments in the process of personal data processing by the processor (Article 28)
Obligation of the processor to accept the instructions of the controller (Article 29)
Mandatory scope of the records (Article 30)
A record of all categories of processing activities carried out on behalf of a controller (Article 30)
Format of the records in terms of the Article 30, pragraphs 1 and 2 of the regulation (Article 30)
Making the record available to the supervisory authority on request (Article 30)
Exemption from the obligations in terms of the Article 30, paragraph 1 and 2 of the regulation (Article 30)
Cooperation with the supervisory authority (Article 31)
Implementation of the appropriate technical and organisational measures (Article 32)
Assessing the appropriate level of security account (Article 32)
Approved code of conduct as referred to in Article 40 or an approved certification mechanism as referred to in Article 42 (Article 32)
Ensuring the compliance in activities on behalf the Controller or Processor in context of the regulation (Article 32)
Period for personal data breach declaration (Article 33)
Data breach notification to the controller (Article 33)
Minimal content of the personal data breach notification (Article 33)
Notification of the additional information in context of the personal data protection (Article 33)
Documentary measurements in personal data protection breach (Article 33)
Notification of the personal data breach to the data subject (Article 34)
Form of the personal data breach notification in terms of the Article 34, paragraph 1 of the regulation (Article 34)
Exemption from the obligation to notify the data subject (Article 34)
Competency of the supervisory authority in context of the notification obligation of the controller (Article 34)
Type of processing that requires the DPIA – general provision (Article 35)
Cooperation between the controller and data protection officer (Article 35)
Processing that requires the obligatory DPIA (Article 35)
List of the kind of processing operations which are subject to the requirement for a data protection impact assessment (Article 35)
List of the kind of processing operations for which no data protection impact assessment is required (Article 35)
Consistency mechanism referred to in Article 63 (Article 35)
Minimal content of the DPIA (Article 35)
Assessing the impact of the processing operations performed by such controllers or processors (Article 35)
Views of data subjects or their representatives on the intended processing (Article 35)
Exemption from processing the DPIA (Article 35)
Situation where the DPIA is necessary (Article 35)
Conditions that requires the prior consultations with supervisory authority (Article 36)
Competency of the supervisory authority in case of specific situations (Article 36)
Information provided to the consulting the supervisory authority pursuant to paragraph 1 (Article 36)
Consultations during the preparation of a proposal for a legislative measure (Article 36)
Consultations with the supervisory authority in the area of the social policy and public health policy (Article 36)
Obligatory designation of the data protection officer (DPO) (Article 37)
Appointing the single data protection officer providing that a data protection officer is easily accessible (Article 37)
Designation of a single data protection officer may be designated for several such authorities or bodies (Article 37)
Facultative designation of the DPO (Article 37)
Basic requirements for the DPO status (Article 37)
Appointment of the employee to DPO position (Article 37)
Publication of the contact details of the data protection officer (Article 37)
Responsibility of the controller and processor in context of the DPO (Article 38)
Supporting the data protection officer in performing the tasks referred to in Article 39 (Article 38)
Organizational status of the DPO (Article 38)
Contacting the DPO (Article 38)
Secrecy obligation of the DPO (Article 38)
DPO and its other tasks duties (Article 38)
Responsibility o the data protection officer (Article 39)
Other tasks of the DPO (Article 39)
Encouraging the drawing up of codes of conduct intended to contribute to the proper application of this Regulation (Article 40)
Codes of conduct (Article 40)
Implementation of the codes of conduct by subjects, that are outside the scope of this regulation (Article 40)
Mandatory monitoring of compliance (Article 40)
Submitting the draft code, amendment or extension to the supervisory authority which is competent pursuant to Article 55 (Article 40)
Registration and publication of the code (Article 40)
Submitting the code or draft of the code to the Board (Article 40)
Submitting the code or draft of the code to the Board (Article 40)
Designation of the general validity of the approved code of conduct (Article 40)
Publication of the valid and approved codes of conduct (Article 40)
Collecting all approved codes of conduct, amendments and extensions in a register (Article 40)
Monitoring of compliance with a code of conduct pursuant to Article 40 (Article 41)
Basic criteria for accreditation (Article 41)
Submitting the draft criteria for an accreditation of a body (Article 41)
Measurements in case of breaching the code of conduct by the Controller or Processor (Article 41)
Reasons for an accreditation withdrawal (Article 41)
Limitation of Article 41 application in context of the public authorities and bodies (Article 41)
Support in the process of certification mechanisms implementation (Article 42)
Demonstrating the existence of appropriate safeguards provided by controllers or processors (Article 42)
Transparent certification process (Article 42)
Responsibility of the Controller and Processor in process of the certification (Article 42)
Common certification and the European Data Protection Seal (Article 42)
Providing the information and access which are necessary to conduct the certification procedure (Article 42)
Certification validity period and prolongation (Article 42)
Certification mechanisms and data protection seals and marks publication (Article 42)
Issuing and renewal of the certification (Article 43)
Accreditation conditions for the accreditation subjects (Article 43)
Implementation criteria for the accreditation process of the Certification subject (Article 43)
Validity of the accreditation and renewal conditions (Article 43)
Information obligation of the Certification subject (Article 43)
Certification criteria publications (Article 43)
Accreditation of a certification body revocation (Article 43)
Certification requirements settled by the Commission (Article 43)
Technical norms for the certifications mechanisms, seals and marks (Article 43)
Basic conditions for the personal data transfer (Article 44)
General conditions for personal data transfer (Article 45)
Assessing the adequacy of the level of protection (Article 45)
Decision of the adequate level of protection of personal data (Article 45)
Monitoring activity of the Commission (Article 45)
Derogation, novelization or detention of the decision of the Commission in terms of Article 45, paragraph 3 (Article 45)
Consultations with the third country or international organization (Article 45)
Exemption from the decisions under the Article 45, paragraph 5 of the regulation (Article 45)
Adequate level of personal data protection on the parts of the third countries or international organizations (Article 45)
Validity of the decisions, published under the Article 25, paragraph 6 of the Directive 95/46/ES (Article 45)
Personal data transfer In the absence of a decision pursuant to Article 45(3) (Article 46)
Setting up the appropriate safeguards referred to Article 46, paragraph 1 of the regulation (Article 46)
Priority forms and approaches to setting up the appropriate safeguards referred to Article 46, paragraph 1 of the regulation (Article 46)
Consistency mechanism application referred to in Article 63 (Article 46)
Validity of the decisions, published in terms of the Article 26, paragraph 2 of the Directive 95/46/ES (Article 46)
Binding corporate rules in accordance with the consistency mechanism set out in Article 63 (Article 47)
Minimal scope of the binding corporate rules referred to in paragraph 1 (Article 47)
Exchange of information between controllers, processors and supervisory authorities for binding corporate rules (Article 47)
Mutual legal assistance between the requesting third country and the Union or a Member State (Article 48)
Conditions for personal data transfer in case of appropriate safeguards absence (Article 49)
Specifications to the personal data transfer in terms of the Article 49, paragraph 1, point g of the regulation (Article 49)
Derogations from the personal data transfer rules (Article 49)
Public interest in the EU law or Member state law in context of the personal data transfer (Article 49)
Transfer limitation of the specific category of the personal data transfer (Article 49)
Documentation of the assessment or suitable safeguards (Article 49)
Activity of the Commission and supervisory authorities in context of the international organization support (Article 50)
Establishing the supervisory authority (Article 51)
Activity of the supervisory authority (Article 51)
Designating the supervisory authority in context of the representation in the Board (Article 51)
Notification obligation of the member state in terms of the Chapter VI of the regulation (Article 51)
Independence of the supervisory authority (Article 52)
Independence of the supervisory authority members (Article 52)
Obligation of the supervisory authority members to refrain from any action incompatible with their duties (Article 52)
Obligation to provide the conditions for supervisory authority activities (Article 52)
Conditions for supervisory authority staff selection (Article 52)
Financial control of the supervisory authority (Article 52)
Appointing the members of the supervisory authority (Article 53)
Basic requirements for the supervisory authority members (Article 53)
Derogations of the supervisory authority member duties (Article 53)
Abrogation of the supervisory authority member (Article 53)
Minimal obligation requirements for the member states in context of establishing supervisory authority (Article 54)
Professional secrecy commitment (Article 54)
Competence of the supervisory authority (Article 55)
Exemption from the application of the Article 56 of the regulation (Article 55)
Derogation of the supervisory authority competence in context pf the judicial power (Article 55)
Competence of the lead supervisory authority in terms of the Article 60 of the regulation (Article 56)
Supervisory authority right on context of the complaint (Article 56)
Obligations of the supervisory authority after receiving the complaint in terms of the Article 56, paragraph 2 of the regulation (Article 56)
Decision of the lead supervisory authority to handle the case (Article 56)
Decision of the lead supervisory authority to reject the case (Article 56)
The lead supervisory authority and the cross-border processing (Article 56)
Supervisory authority territorial activity scope (Article 57)
Facilitation of the complaints submission process (Article 57)
Free – of -charge principle of performing the supervisory authority tasks (Article 57)
Services charge in context of the unfounded or excessive requests (Article 57)
Investigative powers of the supervisory authority (Article 58)
Corrective powers of the supervisory authority (Article 58)
Authorization and advisory powers of the supervisory authority (Article 58)
The exercise of powers on the part of the supervisory authority (Article 58)
Right of the supervisory authority to bring infringements of this Regulation to the attention of the judicial authorities (Article 58)
Implementation of the additional rights for the supervisory authority (Article 58)
The annual report on the supervisory authority activities (Article 59)
Cooperation between the Lead supervisory authority and respective supervisory authorities (Article 60)
Cooperation between the supervisory authorities (Article 60)
Communication in case of the relevant information on the matter to the other supervisory authorities concerned (Article 60)
Lead supervisory authority proceedings in case of the disagreement with the objection (Article 60)
Lead supervisory authority proceedings in case of acceptance of the objection (Article 60)
Biding force of the decision draft for the other supervisory authorities (Article 60)
Notification obligation of the Lead supervisory authority in case of the submitted appeal (Article 60)
Notification obligation of the Lead supervisory authority in case of rejection of the submitted appeal (Article 60)
Lead supervisory authority and other supervisory authorities proceedings in case of the partial rejection of the submitted appeal (Article 60)
Obligations of the Controller (or Processor) after the decision has been notified (Article 60)
Proceedings in case of the urgent need to act (Article 60)
Ways of providing the information between the lead supervisory authority and respective supervisory authorities (Article 60)
Providing the information and cooperation between the supervisory authorities (Article 61)
An appropriate measures required to reply to a request of another supervisory authority (Article 61)
Requests for assistance or cooperation (Article 61)
Reasons for refusing the request by the supervisory authority (Article 61)
Information that are provided to the requesting supervisory authority by the requested supervisory authority (Article 61)
Means of providing the information by the requested supervisory authorities (Article 61)
Basic rules for cooperation between the supervisory authorities (Article 61)
A provisional measure on the territory of the individual Member State in accordance with Article 55(1) (Article 61)
Specification of the forms and means of cooperation between the supervisory authorities (Article 61)
Joint operations and joint investigation (Article 62)
Competency of the supervisory authorities in joint operations (Article 62)
Right of the supervisory authority personal (Article 62)
Responsibility for activities of the dispatching supervisory authority personal (Article 62)
Reimbursement of the damage caused by the supervisory authority personal (Article 62)
Prohibition of requesting the reimbursement in terms of the Article 62, paragraph 4 of the regulation (Article 62)
A provisional measure in case of the breaching the obligations in terms of the Article 62, paragraph 2, second sentence (Article 62)
Consistency mechanism (Article 63)
An opinion of the Board (Article 64)
Examination of the case by the Board (Article 64)
Issuing an opinion in terms of the Article 64, paragraph 1 and 2 of the regulation (Article 64)
Cooperation between the supervisory authorities, Commission and Board (Article 64)
Information obligation of the Chair of the Board (Article 64)
Restriction in adopting the decision by the supervisory authority (Article 64)
Activity of the supervisory activity after receiving the opinion of the Board (Article 64)
Action of the respective supervisory authority after rejecting the opinion of the Board (Article 64)
Reasons for adopting the biding decisions by the Board (Article 65)
Period for adopting the decisions in terms of the Article 65, paragraph 1of the regulation (Article 65)
Activity of the Board when the periods, settled in the Article 65, has been missed (Article 65)
Restrictions in adopting the decision within the period in terms of the Article 65, paragraph 2 and 3 of the regulation (Article 65)
Notification responsibility of the Chair of the Board (Article 65)
Activity of the Chair of the Board after acceptance of the final decision (Article 65)
Adoption of the provisional measures by the respective supervisory authority (Article 66)
Publication of the urgent opinion or biding decision (Article 66)
Request for publishing the urgent opinion (Article 66)
Exemptions in adopting the urgent opinion or urgent biding decision (Article 66)
Right of the Commission to adopt the implementing acts of the general scope (Article 67)
Establishment of the European Data Protection Board (Article 68)
Chair of the Board (Article 68)
Structure of the Board (Article 68)
Designation of the joint representative of the supervisory authorities (Article 68)
Participation of the Commission in the Board sessions (Article 68)
Scope of the competency of the European Data Protection Supervisor (Article 68)
Independence of the Board (Article 69)
Individual provision in context of the Board independence (Article 69)
Scope of the Board activities and responsibilities (Article 70)
Designation of the period by the Commission (Article 70)
Publication of the consultations results, opinions, best practices, made by the Board (Article 70)
Consultations of the Board with the respective parties (Article 70)
An annual report regarding the protection of natural persons with regard to processing in the Union (Article 71)
Scope of the annual report of the Board (Article 71)
Procedure in taking the decisions by the Board (Article 72)
Operational arrangements of the Board (Article 72)
Election of the Chair of the Board (Article 73)
Term of office of the Board (Article 73)
Tasks of the Chair of the Board (Article 74)
Allocation of the tasks to the Chair of the Board and Deputy Chair of the Board (Article 74)
Secretariat (Article 75)
Tasks of the Secretariat of the Board (Article 75)
Personnel of the European Data Protection Supervisor (Article 75)
Cooperation between the Board and European Data Protection Supervisor (Article 75)
Scope of the cooperation between the Board and Secretary (Article 75)
Responsibility of the Secretariat (Article 75)
Confidential discussions of the Board (Article 76)
Access to documents submitted to members of the Board (Article 76)
Competency for submitting the request to the supervisory authority (Article 77)
Information responsibility of the supervisory authority after receiving the complaint (Article 77)
Right to an effective judicial remedy against a supervisory authority (Article 78)
The right to a an effective judicial remedy (Article 78)
Local competency of the judicial authorities for proceeding in case of the personal data protection (Article 78)
Forwarding the opinion or decision to the respective judicial authorities (Article 78)
Right to an effective judicial remedy (Article 79)
Local competency of the Judicial authorities for submitting the proceeding against the Controller or Processor (Article 79)
Representation of data subjects (Article 80)
Extension of the rights and mandates for the not-for-profit body, organisation or association in the Member states (Article 80)
Existence of the identical proceedings (Article 81)
Suspension of the proceeding (Article 81)
Individual provision in context of the judicial authorities competence concerning the identical proceedings (Article 81)
Compensation for the material or non-material damage as a result of an infringement of this Regulation (Article 82)
Special provisions in context of the responsibility for the damage in terms of the Article 82, paragraph 1 of the regulation (Article 82)
Circumstances that are excluding the responsibility of the Controller or Processor for the damage (Article 82)
Joint liability in context of the personal data processing (Article 82)
Compensation for the damage suffered (Article 82)
Court proceedings for exercising the right to receive compensation (Article 82)
Basic rules for imposing the administrative fines (Article 83)
Facts and conditions that are influencing the imposition of administrative fines (Article 83)
Principles for imposing the maximum administrative fines (Article 83)
Provisions concerning the administrative fines – up to 10 000 000,- EUR (Article 83)
Provisions concerning the administrative fines – up to 10 000 000,- EUR (Article 83)
Fines for the non-compliance with an order by the supervisory authority as referred to in Article 58(2) (Article 83)
Some other principles for imposing the administrative fines (Article 83)
Competency of the supervisory authority and appropriate procedural safeguards (Article 83)
Application of the sanction mechanism when no administrative fines are imposed (Article 83)
Special provisions concerning the other sanction in case of non-compliance with the regulation (Article 84)
Notification obligation of the member state in terms of the Article 84, paragraph 1 of the regulation (Article 84)
Harmonization of the right to the protection of personal data with the legal system of the member state (Article 85)
Processing carried out for journalistic purposes or the purpose of academic artistic or literary expression (Article 85)
Notification obligation of the member state in terms of the Article 85, paragraph 2 of the regulation (Article 85)
Processing and public access to official documents (Article 86)
Processing of the national identification number (Article 87)
Principles of personal data processing for the purpose of the employment (Article 88)
Special provisions to personal data processing for the purpose of the group of undertakings (Article 88)
Notification obligation in terms of the Article 88, paragraph 1 of the regulation (Article 88)
Appropriate safeguards, in accordance with this Regulation, for the rights and freedoms of the data subject (Article 89)
Exemption in personal data processing for scientific or historical research purposes or statistical purposes (Article 89)
Exemption in personal data processing for archiving purposes in the public interest (Article 89)
Restrictions in the exemptions, noted in the Article 89, paragraph 2 and 3 of the regulation (Article 89)
Right of the supervisory authorities in terms of the Article 58, paragraph 1, points e) and f) of the regulation (Article 90)
Notification obligation in context of the Article 90, paragraph 1 of the regulations (Article 90)
Existing data protection rules of churches and religious associations unification (Article 91)
Supervisory authority for the personal data processing in churches and religious associations (Article 91)
Right of the Commission to adopt the delegated acts (Article 92)
Period for the delegate acts adoption (Article 92)
Subjects entitled to revoke the delegation of power referred to in Article 12(8) and Article 43(8) (Article 92)
Notification of delegated act adoption (Article 92)
Entering into the force of the delegated act (Article 92)
Cooperation between the Commission and Committee within the meaning of Regulation (EU) No 182/2011 (Article 93)
Reference to the Article 5 of Regulation (EU) No 182/2011 (Article 93)
Reference to the Article 8 of Regulation (EU) No 182/2011 (Article 93)
Date of the Directive 95/46/EC repeal (Article 94)
Special provisions to the Directive 95/46/EC references (Article 94)
Relationship with Directive 2002/58/EC (Article 95)
Relationship with previously concluded Agreements (Article 96)
Report on the evaluation and review of this Regulation to the European Parliament and to the Council (Article 97)
Obligations of the Commission in the context of the evaluation and reviewing of this regulation (Article 97)
Right of the Commission request information from Member States and supervisory authorities (Article 97)
Proceeding of the Commission during the evaluation and reviewing process (Article 97)
Submission of the appropriate proposals to amend this Regulation (Article 97)
Review of other Union legal acts on data protection (Article 98)
Entry into force of this regulation (Article 99)
Application of this regulation (Article 99)