# Directive (EU) 2019/1937 of the European Parliament and of the Council of 23 October 2019 on the protection of persons who report breaches of Union law, Division J: Point (a)(x) of Article 2(1) — protection of privacy and personal data, and security of network and information systems:

Extent: E+W+S+N.I.

(i) Directive 2002/58/EC of the European Parliament and of the Council of 12 July 2002 concerning the processing of personal data and the protection of privacy in the electronic communications sector (Directive on privacy and electronic communications) (OJ L 201, 31.7.2002, p. 37);
(ii) Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ L 119, 4.5.2016, p. 1);
(iii) Directive (EU) 2016/1148 of the European Parliament and of the Council of 6 July 2016 concerning measures for a high common level of security of network and information systems across the Union (OJ L 194, 19.7.2016, p. 1).

---
Source: https://www.legislation.gov.uk/eudr/2019/1937/annex/part/I/division/J (the official version)
Page: https://openlegislation.uk/eu-directive-2019-1937/annex/part-I/division-J
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.