General obligations General obligations 102General obligations of the controller 103Data protection by design 104Joint controllers 105Processors 106Processing under the authority of the controller or processor General obligations