Chapter 4 Controller and processor Overview General obligations Obligations relating to security Obligations relating to personal data breaches Chapter 4