Chapter 4

Controller and processor

Article 24

-

Responsibility of the controller

Responsibility of the controller

Article 25

-

Data protection by design and by default

Data protection by design and by default

Article 26

-

Joint controllers

Joint controllers

Article 27

-

Representatives of controllers or processors not established in the Union

Representatives of controllers or processors not established in the Union

Article 28

-

Processor

Processor

Article 29

-

Processing under the authority of the controller or processor

Processing under the authority of the controller or processor

Article 30

-

Records of processing activities

Records of processing activities

Article 31

-

Cooperation with the supervisory authority

Cooperation with the supervisory authority

Article 32

-

Security of processing

Security of processing

Article 33

-

Notification of a personal data breach to the supervisory authority

Notification of a personal data breach to the supervisory authority

Article 34

-

Communication of a personal data breach to the data subject

Communication of a personal data breach to the data subject

Article 35

-

Data protection impact assessment

Data protection impact assessment

Article 36

-

Prior consultation

Prior consultation

Article 37

-

Designation of the data protection officer

Designation of the data protection officer

Article 38

-

Position of the data protection officer

Position of the data protection officer

Article 39

-

Tasks of the data protection officer

Tasks of the data protection officer

Article 40

-

Codes of conduct

Codes of conduct

Article 41

-

Monitoring of approved codes of conduct

Monitoring of approved codes of conduct

Article 42

-

Certification

Certification

Article 43

-

Certification bodies

Certification bodies