{
  "url": "https://openlegislation.uk/eu-regulation-2016-679",
  "json_url": "https://openlegislation.uk/eu-regulation-2016-679.json",
  "id": "eur/2016/679",
  "title": "Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (United Kingdom General Data Protection Regulation) (Text with EEA relevance)",
  "short_title": "Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data…",
  "long_title": null,
  "citation": "EU Regulation 2016/679",
  "type": "eur",
  "year": "2016",
  "number": "679",
  "version": "current",
  "date": "2016-04-27",
  "revised": false,
  "valid_from": null,
  "extent": "E+W+S+N.I.",
  "unapplied_effects": 5,
  "provisions": [
    {
      "path": "introduction",
      "kind": "introduction",
      "number": null,
      "heading": "Introductory text",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/introduction",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": null
    },
    {
      "path": "chapter/I",
      "kind": "chapter",
      "number": "I",
      "heading": "General provisions",
      "url": null,
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": null
    },
    {
      "path": "article/1",
      "kind": "article",
      "number": "1",
      "heading": "Subject-matter and objectives",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-1",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "chapter/I"
    },
    {
      "path": "article/2",
      "kind": "article",
      "number": "2",
      "heading": "Material scope",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-2",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "chapter/I"
    },
    {
      "path": "article/3",
      "kind": "article",
      "number": "3",
      "heading": "Territorial scope",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-3",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "chapter/I"
    },
    {
      "path": "article/4",
      "kind": "article",
      "number": "4",
      "heading": "Definitions",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-4",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "chapter/I"
    },
    {
      "path": "article/4A",
      "kind": "article",
      "number": "4A",
      "heading": "Periods of time",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-4A",
      "extent": null,
      "status": null,
      "parent": "chapter/I"
    },
    {
      "path": "chapter/II",
      "kind": "chapter",
      "number": "II",
      "heading": "Principles",
      "url": null,
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": null
    },
    {
      "path": "article/5",
      "kind": "article",
      "number": "5",
      "heading": "Principles relating to processing of personal data",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-5",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "chapter/II"
    },
    {
      "path": "article/6",
      "kind": "article",
      "number": "6",
      "heading": "Lawfulness of processing",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-6",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "chapter/II"
    },
    {
      "path": "article/7",
      "kind": "article",
      "number": "7",
      "heading": "Conditions for consent",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-7",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "chapter/II"
    },
    {
      "path": "article/8",
      "kind": "article",
      "number": "8",
      "heading": "Conditions applicable to child's consent in relation to information society services",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-8",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "chapter/II"
    },
    {
      "path": "article/8ZA",
      "kind": "article",
      "number": "8ZA",
      "heading": "Child’s consent in relation to information society services: age verification",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-8ZA",
      "extent": null,
      "status": null,
      "parent": "chapter/II"
    },
    {
      "path": "article/8A",
      "kind": "article",
      "number": "8A",
      "heading": "Purpose limitation: further processing",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-8A",
      "extent": null,
      "status": null,
      "parent": "chapter/II"
    },
    {
      "path": "article/9",
      "kind": "article",
      "number": "9",
      "heading": "Processing of special categories of personal data",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-9",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "chapter/II"
    },
    {
      "path": "article/10",
      "kind": "article",
      "number": "10",
      "heading": "Processing of personal data relating to criminal convictions and offences",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-10",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "chapter/II"
    },
    {
      "path": "article/11",
      "kind": "article",
      "number": "11",
      "heading": "Processing which does not require identification",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-11",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "chapter/II"
    },
    {
      "path": "article/11A",
      "kind": "article",
      "number": "11A",
      "heading": "Further provision about processing of special categories of personal data",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-11A",
      "extent": null,
      "status": null,
      "parent": "chapter/II"
    },
    {
      "path": "chapter/III",
      "kind": "chapter",
      "number": "III",
      "heading": "Rights of the data subject",
      "url": null,
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": null
    },
    {
      "path": "chapter/III/section/1",
      "kind": "section",
      "number": "1",
      "heading": "Transparency and modalities",
      "url": null,
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "chapter/III"
    },
    {
      "path": "article/12",
      "kind": "article",
      "number": "12",
      "heading": "Transparent information, communication and modalities for the exercise of the rights of the data subject",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-12",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "chapter/III/section/1"
    },
    {
      "path": "article/12A.",
      "kind": "article",
      "number": "12A.",
      "heading": "Meaning of “applicable time period”",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-12A.",
      "extent": null,
      "status": null,
      "parent": "chapter/III/section/1"
    },
    {
      "path": "chapter/III/section/2",
      "kind": "section",
      "number": "2",
      "heading": "Information and access to personal data",
      "url": null,
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "chapter/III"
    },
    {
      "path": "article/13",
      "kind": "article",
      "number": "13",
      "heading": "Information to be provided where personal data are collected from the data subject",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-13",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "chapter/III/section/2"
    },
    {
      "path": "article/14",
      "kind": "article",
      "number": "14",
      "heading": "Information to be provided where personal data have not been obtained from the data subject",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-14",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "chapter/III/section/2"
    },
    {
      "path": "article/15",
      "kind": "article",
      "number": "15",
      "heading": "Right of access by the data subject",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-15",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "chapter/III/section/2"
    },
    {
      "path": "chapter/III/section/3",
      "kind": "section",
      "number": "3",
      "heading": "Rectification and erasure",
      "url": null,
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "chapter/III"
    },
    {
      "path": "article/16",
      "kind": "article",
      "number": "16",
      "heading": "Right to rectification",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-16",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "chapter/III/section/3"
    },
    {
      "path": "article/17",
      "kind": "article",
      "number": "17",
      "heading": "Right to erasure (‘right to be forgotten’)",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-17",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "chapter/III/section/3"
    },
    {
      "path": "article/18",
      "kind": "article",
      "number": "18",
      "heading": "Right to restriction of processing",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-18",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "chapter/III/section/3"
    },
    {
      "path": "article/19",
      "kind": "article",
      "number": "19",
      "heading": "Notification obligation regarding rectification or erasure of personal data or restriction of processing",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-19",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "chapter/III/section/3"
    },
    {
      "path": "article/20",
      "kind": "article",
      "number": "20",
      "heading": "Right to data portability",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-20",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "chapter/III/section/3"
    },
    {
      "path": "chapter/III/section/4",
      "kind": "section",
      "number": "4",
      "heading": "Right to object ...",
      "url": null,
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "chapter/III"
    },
    {
      "path": "article/21",
      "kind": "article",
      "number": "21",
      "heading": "Right to object",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-21",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "chapter/III/section/4"
    },
    {
      "path": "article/22",
      "kind": "article",
      "number": "22",
      "heading": "Automated individual decision-making, including profiling",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-22",
      "extent": "E+W+S+N.I.",
      "status": "repealed",
      "parent": "chapter/III/section/4"
    },
    {
      "path": "chapter/III/section/4A",
      "kind": "section",
      "number": "4A",
      "heading": "Automated individual decision-making",
      "url": null,
      "extent": null,
      "status": null,
      "parent": "chapter/III"
    },
    {
      "path": "article/22A",
      "kind": "article",
      "number": "22A",
      "heading": "Automated processing and significant decisions",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-22A",
      "extent": null,
      "status": null,
      "parent": "chapter/III/section/4A"
    },
    {
      "path": "article/22B",
      "kind": "article",
      "number": "22B",
      "heading": "Restrictions on automated decision-making",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-22B",
      "extent": null,
      "status": null,
      "parent": "chapter/III/section/4A"
    },
    {
      "path": "article/22C",
      "kind": "article",
      "number": "22C",
      "heading": "Safeguards for automated decision-making",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-22C",
      "extent": null,
      "status": null,
      "parent": "chapter/III/section/4A"
    },
    {
      "path": "article/22D",
      "kind": "article",
      "number": "22D",
      "heading": "Further provision about automated decision-making",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-22D",
      "extent": null,
      "status": null,
      "parent": "chapter/III/section/4A"
    },
    {
      "path": "chapter/III/section/5",
      "kind": "section",
      "number": "5",
      "heading": "Restrictions",
      "url": null,
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "chapter/III"
    },
    {
      "path": "article/23",
      "kind": "article",
      "number": "23",
      "heading": "Restrictions",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-23",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "chapter/III/section/5"
    },
    {
      "path": "chapter/IV",
      "kind": "chapter",
      "number": "IV",
      "heading": "Controller and processor",
      "url": null,
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": null
    },
    {
      "path": "chapter/IV/section/1",
      "kind": "section",
      "number": "1",
      "heading": "General obligations",
      "url": null,
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "chapter/IV"
    },
    {
      "path": "article/24",
      "kind": "article",
      "number": "24",
      "heading": "Responsibility of the controller",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-24",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "chapter/IV/section/1"
    },
    {
      "path": "article/25",
      "kind": "article",
      "number": "25",
      "heading": "Data protection by design and by default",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-25",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "chapter/IV/section/1"
    },
    {
      "path": "article/26",
      "kind": "article",
      "number": "26",
      "heading": "Joint controllers",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-26",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "chapter/IV/section/1"
    },
    {
      "path": "article/27",
      "kind": "article",
      "number": "27",
      "heading": "Representatives of controllers or processors not established in the United Kingdom",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-27",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "chapter/IV/section/1"
    },
    {
      "path": "article/28",
      "kind": "article",
      "number": "28",
      "heading": "Processor",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-28",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "chapter/IV/section/1"
    },
    {
      "path": "article/29",
      "kind": "article",
      "number": "29",
      "heading": "Processing under the authority of the controller or processor",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-29",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "chapter/IV/section/1"
    },
    {
      "path": "article/30",
      "kind": "article",
      "number": "30",
      "heading": "Records of processing activities",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-30",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "chapter/IV/section/1"
    },
    {
      "path": "article/31",
      "kind": "article",
      "number": "31",
      "heading": "Cooperation with the Commission",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-31",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "chapter/IV/section/1"
    },
    {
      "path": "chapter/IV/section/2",
      "kind": "section",
      "number": "2",
      "heading": "Security of personal data",
      "url": null,
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "chapter/IV"
    },
    {
      "path": "article/32",
      "kind": "article",
      "number": "32",
      "heading": "Security of processing",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-32",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "chapter/IV/section/2"
    },
    {
      "path": "article/33",
      "kind": "article",
      "number": "33",
      "heading": "Notification of a personal data breach to the Commission",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-33",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "chapter/IV/section/2"
    },
    {
      "path": "article/34",
      "kind": "article",
      "number": "34",
      "heading": "Communication of a personal data breach to the data subject",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-34",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "chapter/IV/section/2"
    },
    {
      "path": "chapter/IV/section/3",
      "kind": "section",
      "number": "3",
      "heading": "Data protection impact assessment and prior consultation",
      "url": null,
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "chapter/IV"
    },
    {
      "path": "article/35",
      "kind": "article",
      "number": "35",
      "heading": "Data protection impact assessment",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-35",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "chapter/IV/section/3"
    },
    {
      "path": "article/36",
      "kind": "article",
      "number": "36",
      "heading": "Prior consultation",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-36",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "chapter/IV/section/3"
    },
    {
      "path": "chapter/IV/section/4",
      "kind": "section",
      "number": "4",
      "heading": "Data protection officer",
      "url": null,
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "chapter/IV"
    },
    {
      "path": "article/37",
      "kind": "article",
      "number": "37",
      "heading": "Designation of the data protection officer",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-37",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "chapter/IV/section/4"
    },
    {
      "path": "article/38",
      "kind": "article",
      "number": "38",
      "heading": "Position of the data protection officer",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-38",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "chapter/IV/section/4"
    },
    {
      "path": "article/39",
      "kind": "article",
      "number": "39",
      "heading": "Tasks of the data protection officer",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-39",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "chapter/IV/section/4"
    },
    {
      "path": "chapter/IV/section/5",
      "kind": "section",
      "number": "5",
      "heading": "Codes of conduct and certification",
      "url": null,
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "chapter/IV"
    },
    {
      "path": "article/40",
      "kind": "article",
      "number": "40",
      "heading": "Codes of conduct",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-40",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "chapter/IV/section/5"
    },
    {
      "path": "article/41",
      "kind": "article",
      "number": "41",
      "heading": "Monitoring of approved codes of conduct",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-41",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "chapter/IV/section/5"
    },
    {
      "path": "article/42",
      "kind": "article",
      "number": "42",
      "heading": "Certification",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-42",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "chapter/IV/section/5"
    },
    {
      "path": "article/43",
      "kind": "article",
      "number": "43",
      "heading": "Certification bodies",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-43",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "chapter/IV/section/5"
    },
    {
      "path": "chapter/V",
      "kind": "chapter",
      "number": "V",
      "heading": "Transfers of personal data to third countries or international organisations",
      "url": null,
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": null
    },
    {
      "path": "article/44",
      "kind": "article",
      "number": "44",
      "heading": "General principle for transfers",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-44",
      "extent": "E+W+S+N.I.",
      "status": "repealed",
      "parent": "chapter/V"
    },
    {
      "path": "article/44A",
      "kind": "article",
      "number": "44A",
      "heading": "General principles for transfers",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-44A",
      "extent": null,
      "status": null,
      "parent": "chapter/V"
    },
    {
      "path": "article/45",
      "kind": "article",
      "number": "45",
      "heading": "Transfers on the basis of an adequacy decision",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-45",
      "extent": "E+W+S+N.I.",
      "status": "repealed",
      "parent": "chapter/V"
    },
    {
      "path": "article/45A",
      "kind": "article",
      "number": "45A",
      "heading": "Transfers approved by regulations",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-45A",
      "extent": null,
      "status": null,
      "parent": "chapter/V"
    },
    {
      "path": "article/45B",
      "kind": "article",
      "number": "45B",
      "heading": "The data protection test",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-45B",
      "extent": null,
      "status": null,
      "parent": "chapter/V"
    },
    {
      "path": "article/45C",
      "kind": "article",
      "number": "45C",
      "heading": "Transfers approved by regulations: monitoring",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-45C",
      "extent": null,
      "status": null,
      "parent": "chapter/V"
    },
    {
      "path": "article/46",
      "kind": "article",
      "number": "46",
      "heading": "Transfers subject to appropriate safeguards",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-46",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "chapter/V"
    },
    {
      "path": "article/47",
      "kind": "article",
      "number": "47",
      "heading": "Transfers subject to appropriate safeguards: Binding corporate rules",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-47",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "chapter/V"
    },
    {
      "path": "article/47A",
      "kind": "article",
      "number": "47A",
      "heading": "Transfers subject to appropriate safeguards: further provision",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-47A",
      "extent": null,
      "status": null,
      "parent": "chapter/V"
    },
    {
      "path": "article/48",
      "kind": "article",
      "number": "48",
      "heading": "Transfers or disclosures not authorised by Union law",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-48",
      "extent": "E+W+S+N.I.",
      "status": "repealed",
      "parent": "chapter/V"
    },
    {
      "path": "article/49",
      "kind": "article",
      "number": "49",
      "heading": "Derogations for specific situations",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-49",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "chapter/V"
    },
    {
      "path": "article/49A",
      "kind": "article",
      "number": "49A",
      "heading": "Restriction in the public interest",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-49A",
      "extent": null,
      "status": null,
      "parent": "chapter/V"
    },
    {
      "path": "article/50",
      "kind": "article",
      "number": "50",
      "heading": "International cooperation for the protection of personal data",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-50",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "chapter/V"
    },
    {
      "path": "chapter/VI",
      "kind": "chapter",
      "number": "VI",
      "heading": "The Commission",
      "url": null,
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": null
    },
    {
      "path": "chapter/VI/section/1",
      "kind": "section",
      "number": "1",
      "heading": "Independent status",
      "url": null,
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "chapter/VI"
    },
    {
      "path": "article/51",
      "kind": "article",
      "number": "51",
      "heading": "Monitoring the application of this Regulation",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-51",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "chapter/VI/section/1"
    },
    {
      "path": "article/52",
      "kind": "article",
      "number": "52",
      "heading": "Independence",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-52",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "chapter/VI/section/1"
    },
    {
      "path": "article/53",
      "kind": "article",
      "number": "53",
      "heading": "General conditions for the members of the supervisory authority",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-53",
      "extent": "E+W+S+N.I.",
      "status": "repealed",
      "parent": "chapter/VI/section/1"
    },
    {
      "path": "article/54",
      "kind": "article",
      "number": "54",
      "heading": "Rules on the establishment of the supervisory authority",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-54",
      "extent": "E+W+S+N.I.",
      "status": "repealed",
      "parent": "chapter/VI/section/1"
    },
    {
      "path": "chapter/VI/section/2",
      "kind": "section",
      "number": "2",
      "heading": "Tasks and powers",
      "url": null,
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "chapter/VI"
    },
    {
      "path": "article/55",
      "kind": "article",
      "number": "55",
      "heading": "Competence",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-55",
      "extent": "E+W+S+N.I.",
      "status": "repealed",
      "parent": "chapter/VI/section/2"
    },
    {
      "path": "article/56",
      "kind": "article",
      "number": "56",
      "heading": "Competence of the lead supervisory authority",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-56",
      "extent": "E+W+S+N.I.",
      "status": "repealed",
      "parent": "chapter/VI/section/2"
    },
    {
      "path": "article/57",
      "kind": "article",
      "number": "57",
      "heading": "Tasks",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-57",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "chapter/VI/section/2"
    },
    {
      "path": "article/58",
      "kind": "article",
      "number": "58",
      "heading": "Powers",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-58",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "chapter/VI/section/2"
    },
    {
      "path": "article/59",
      "kind": "article",
      "number": "59",
      "heading": "Activity reports",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-59",
      "extent": "E+W+S+N.I.",
      "status": "repealed",
      "parent": "chapter/VI/section/2"
    },
    {
      "path": "chapter/VII",
      "kind": "chapter",
      "number": "VII",
      "heading": "Cooperation and consistency",
      "url": null,
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": null
    },
    {
      "path": "chapter/VII/section/1",
      "kind": "section",
      "number": "1",
      "heading": "Cooperation",
      "url": null,
      "extent": "E+W+S+N.I.",
      "status": "repealed",
      "parent": "chapter/VII"
    },
    {
      "path": "article/60",
      "kind": "article",
      "number": "60",
      "heading": "Cooperation between the lead supervisory authority and the other supervisory authorities concerned",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-60",
      "extent": "E+W+S+N.I.",
      "status": "repealed",
      "parent": "chapter/VII/section/1"
    },
    {
      "path": "article/61",
      "kind": "article",
      "number": "61",
      "heading": "Mutual assistance",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-61",
      "extent": "E+W+S+N.I.",
      "status": "repealed",
      "parent": "chapter/VII/section/1"
    },
    {
      "path": "article/62",
      "kind": "article",
      "number": "62",
      "heading": "Joint operations of supervisory authorities",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-62",
      "extent": "E+W+S+N.I.",
      "status": "repealed",
      "parent": "chapter/VII/section/1"
    },
    {
      "path": "chapter/VII/section/2",
      "kind": "section",
      "number": "2",
      "heading": "Consistency",
      "url": null,
      "extent": "E+W+S+N.I.",
      "status": "repealed",
      "parent": "chapter/VII"
    },
    {
      "path": "article/63",
      "kind": "article",
      "number": "63",
      "heading": "Consistency mechanism",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-63",
      "extent": "E+W+S+N.I.",
      "status": "repealed",
      "parent": "chapter/VII/section/2"
    },
    {
      "path": "article/64",
      "kind": "article",
      "number": "64",
      "heading": "Opinion of the Board",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-64",
      "extent": "E+W+S+N.I.",
      "status": "repealed",
      "parent": "chapter/VII/section/2"
    },
    {
      "path": "article/65",
      "kind": "article",
      "number": "65",
      "heading": "Dispute resolution by the Board",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-65",
      "extent": "E+W+S+N.I.",
      "status": "repealed",
      "parent": "chapter/VII/section/2"
    },
    {
      "path": "article/66",
      "kind": "article",
      "number": "66",
      "heading": "Urgency procedure",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-66",
      "extent": "E+W+S+N.I.",
      "status": "repealed",
      "parent": "chapter/VII/section/2"
    },
    {
      "path": "article/67",
      "kind": "article",
      "number": "67",
      "heading": "Exchange of information",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-67",
      "extent": "E+W+S+N.I.",
      "status": "repealed",
      "parent": "chapter/VII/section/2"
    },
    {
      "path": "chapter/VII/section/3",
      "kind": "section",
      "number": "3",
      "heading": "European data protection board",
      "url": null,
      "extent": "E+W+S+N.I.",
      "status": "repealed",
      "parent": "chapter/VII"
    },
    {
      "path": "article/68",
      "kind": "article",
      "number": "68",
      "heading": "European Data Protection Board",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-68",
      "extent": "E+W+S+N.I.",
      "status": "repealed",
      "parent": "chapter/VII/section/3"
    },
    {
      "path": "article/69",
      "kind": "article",
      "number": "69",
      "heading": "Independence",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-69",
      "extent": "E+W+S+N.I.",
      "status": "repealed",
      "parent": "chapter/VII/section/3"
    },
    {
      "path": "article/70",
      "kind": "article",
      "number": "70",
      "heading": "Tasks of the Board",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-70",
      "extent": "E+W+S+N.I.",
      "status": "repealed",
      "parent": "chapter/VII/section/3"
    },
    {
      "path": "article/71",
      "kind": "article",
      "number": "71",
      "heading": "Reports",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-71",
      "extent": "E+W+S+N.I.",
      "status": "repealed",
      "parent": "chapter/VII/section/3"
    },
    {
      "path": "article/72",
      "kind": "article",
      "number": "72",
      "heading": "Procedure",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-72",
      "extent": "E+W+S+N.I.",
      "status": "repealed",
      "parent": "chapter/VII/section/3"
    },
    {
      "path": "article/73",
      "kind": "article",
      "number": "73",
      "heading": "Chair",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-73",
      "extent": "E+W+S+N.I.",
      "status": "repealed",
      "parent": "chapter/VII/section/3"
    },
    {
      "path": "article/74",
      "kind": "article",
      "number": "74",
      "heading": "Tasks of the Chair",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-74",
      "extent": "E+W+S+N.I.",
      "status": "repealed",
      "parent": "chapter/VII/section/3"
    },
    {
      "path": "article/75",
      "kind": "article",
      "number": "75",
      "heading": "Secretariat",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-75",
      "extent": "E+W+S+N.I.",
      "status": "repealed",
      "parent": "chapter/VII/section/3"
    },
    {
      "path": "article/76",
      "kind": "article",
      "number": "76",
      "heading": "Confidentiality",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-76",
      "extent": "E+W+S+N.I.",
      "status": "repealed",
      "parent": "chapter/VII/section/3"
    },
    {
      "path": "chapter/VIII",
      "kind": "chapter",
      "number": "VIII",
      "heading": "Remedies, liability and penalties",
      "url": null,
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": null
    },
    {
      "path": "article/77",
      "kind": "article",
      "number": "77",
      "heading": "Right to lodge a complaint with the Commissioner",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-77",
      "extent": "E+W+S+N.I.",
      "status": "repealed",
      "parent": "chapter/VIII"
    },
    {
      "path": "article/78",
      "kind": "article",
      "number": "78",
      "heading": "Right to an effective judicial remedy against the Commission",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-78",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "chapter/VIII"
    },
    {
      "path": "article/79",
      "kind": "article",
      "number": "79",
      "heading": "Right to an effective judicial remedy against a controller or processor",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-79",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "chapter/VIII"
    },
    {
      "path": "article/80",
      "kind": "article",
      "number": "80",
      "heading": "Representation of data subjects",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-80",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "chapter/VIII"
    },
    {
      "path": "article/81",
      "kind": "article",
      "number": "81",
      "heading": "Suspension of proceedings",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-81",
      "extent": "E+W+S+N.I.",
      "status": "repealed",
      "parent": "chapter/VIII"
    },
    {
      "path": "article/82",
      "kind": "article",
      "number": "82",
      "heading": "Right to compensation and liability",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-82",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "chapter/VIII"
    },
    {
      "path": "article/83",
      "kind": "article",
      "number": "83",
      "heading": "General conditions for imposing administrative fines",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-83",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "chapter/VIII"
    },
    {
      "path": "article/84",
      "kind": "article",
      "number": "84",
      "heading": "Penalties",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-84",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "chapter/VIII"
    },
    {
      "path": "chapter/8A",
      "kind": "chapter",
      "number": "8A",
      "heading": "Safeguards for processing for research, archiving or statistical purposes",
      "url": null,
      "extent": null,
      "status": null,
      "parent": null
    },
    {
      "path": "article/84A",
      "kind": "article",
      "number": "84A",
      "heading": "Research, archives and statistics",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-84A",
      "extent": null,
      "status": null,
      "parent": "chapter/8A"
    },
    {
      "path": "article/84B",
      "kind": "article",
      "number": "84B",
      "heading": "Additional requirements when processing for RAS purposes",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-84B",
      "extent": null,
      "status": null,
      "parent": "chapter/8A"
    },
    {
      "path": "article/84C",
      "kind": "article",
      "number": "84C",
      "heading": "Appropriate safeguards",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-84C",
      "extent": null,
      "status": null,
      "parent": "chapter/8A"
    },
    {
      "path": "article/84D",
      "kind": "article",
      "number": "84D",
      "heading": "Appropriate safeguards: further provision",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-84D",
      "extent": null,
      "status": null,
      "parent": "chapter/8A"
    },
    {
      "path": "chapter/IX",
      "kind": "chapter",
      "number": "IX",
      "heading": "Provisions relating to other specific processing situations",
      "url": null,
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": null
    },
    {
      "path": "article/85",
      "kind": "article",
      "number": "85",
      "heading": "Processing and freedom of expression and information",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-85",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "chapter/IX"
    },
    {
      "path": "article/86",
      "kind": "article",
      "number": "86",
      "heading": "Processing and public access to official documents",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-86",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "chapter/IX"
    },
    {
      "path": "article/86A",
      "kind": "article",
      "number": "86A",
      "heading": "Processing and national security and defence",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-86A",
      "extent": null,
      "status": null,
      "parent": "chapter/IX"
    },
    {
      "path": "article/87",
      "kind": "article",
      "number": "87",
      "heading": "Processing of the national identification number",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-87",
      "extent": "E+W+S+N.I.",
      "status": "repealed",
      "parent": "chapter/IX"
    },
    {
      "path": "article/88",
      "kind": "article",
      "number": "88",
      "heading": "Processing in the context of employment",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-88",
      "extent": "E+W+S+N.I.",
      "status": "repealed",
      "parent": "chapter/IX"
    },
    {
      "path": "article/89",
      "kind": "article",
      "number": "89",
      "heading": "Safeguards and derogations relating to processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-89",
      "extent": "E+W+S+N.I.",
      "status": "repealed",
      "parent": "chapter/IX"
    },
    {
      "path": "article/90",
      "kind": "article",
      "number": "90",
      "heading": "Obligations of secrecy",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-90",
      "extent": "E+W+S+N.I.",
      "status": "repealed",
      "parent": "chapter/IX"
    },
    {
      "path": "article/91",
      "kind": "article",
      "number": "91",
      "heading": "Existing data protection rules of churches and religious associations",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-91",
      "extent": "E+W+S+N.I.",
      "status": "repealed",
      "parent": "chapter/IX"
    },
    {
      "path": "chapter/9A",
      "kind": "chapter",
      "number": "9A",
      "heading": "Regulations",
      "url": null,
      "extent": null,
      "status": null,
      "parent": null
    },
    {
      "path": "article/91A",
      "kind": "article",
      "number": "91A",
      "heading": "Regulations made by Secretary of State",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-91A",
      "extent": null,
      "status": null,
      "parent": "chapter/9A"
    },
    {
      "path": "chapter/X",
      "kind": "chapter",
      "number": "X",
      "heading": "Delegated acts and implementing acts",
      "url": null,
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": null
    },
    {
      "path": "article/92",
      "kind": "article",
      "number": "92",
      "heading": "Exercise of the delegation",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-92",
      "extent": "E+W+S+N.I.",
      "status": "repealed",
      "parent": "chapter/X"
    },
    {
      "path": "article/93",
      "kind": "article",
      "number": "93",
      "heading": "Committee procedure",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-93",
      "extent": "E+W+S+N.I.",
      "status": "repealed",
      "parent": "chapter/X"
    },
    {
      "path": "chapter/XI",
      "kind": "chapter",
      "number": "XI",
      "heading": "Final provisions",
      "url": null,
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": null
    },
    {
      "path": "article/94",
      "kind": "article",
      "number": "94",
      "heading": "Repeal of Directive 95/46/EC",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-94",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "chapter/XI"
    },
    {
      "path": "article/95",
      "kind": "article",
      "number": "95",
      "heading": "Relationship with domestic law made before IP completion day implementing Directive 2002/58/EC of the European Parliament and of the Council of 12th July 2002 concerning the processing of personal data and the protection of privacy in the electronic communications sector",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-95",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "chapter/XI"
    },
    {
      "path": "article/96",
      "kind": "article",
      "number": "96",
      "heading": "Relationship with previously concluded Agreements",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-96",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "chapter/XI"
    },
    {
      "path": "article/97",
      "kind": "article",
      "number": "97",
      "heading": "Commission reports",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-97",
      "extent": "E+W+S+N.I.",
      "status": "repealed",
      "parent": "chapter/XI"
    },
    {
      "path": "article/98",
      "kind": "article",
      "number": "98",
      "heading": "Review of other Union legal acts on data protection",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-98",
      "extent": "E+W+S+N.I.",
      "status": "repealed",
      "parent": "chapter/XI"
    },
    {
      "path": "article/99",
      "kind": "article",
      "number": "99",
      "heading": "Entry into force and application",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/article-99",
      "extent": "E+W+S+N.I.",
      "status": "repealed",
      "parent": "chapter/XI"
    },
    {
      "path": "signature",
      "kind": "signature",
      "number": null,
      "heading": "Signature",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/signature",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": null
    },
    {
      "path": "annex/1",
      "kind": "annex",
      "number": "1",
      "heading": "LAWFULNESS OF PROCESSING: RECOGNISED LEGITIMATE INTERESTS",
      "url": null,
      "extent": null,
      "status": null,
      "parent": null
    },
    {
      "path": "annex/1/1",
      "kind": "article",
      "number": "1",
      "heading": "Disclosure for purposes of processing described in Article 6(1)(e)",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/annex-1/1",
      "extent": null,
      "status": null,
      "parent": "annex/1"
    },
    {
      "path": "annex/1/2",
      "kind": "article",
      "number": "2",
      "heading": "National security, public security and defence",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/annex-1/2",
      "extent": null,
      "status": null,
      "parent": "annex/1"
    },
    {
      "path": "annex/1/3",
      "kind": "article",
      "number": "3",
      "heading": "Emergencies",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/annex-1/3",
      "extent": null,
      "status": null,
      "parent": "annex/1"
    },
    {
      "path": "annex/1/4",
      "kind": "article",
      "number": "4",
      "heading": null,
      "url": "https://openlegislation.uk/eu-regulation-2016-679/annex-1/4",
      "extent": null,
      "status": null,
      "parent": "annex/1"
    },
    {
      "path": "annex/1/5",
      "kind": "article",
      "number": "5",
      "heading": "Crime",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/annex-1/5",
      "extent": null,
      "status": null,
      "parent": "annex/1"
    },
    {
      "path": "annex/1/6",
      "kind": "article",
      "number": "6",
      "heading": "Safeguarding vulnerable individuals",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/annex-1/6",
      "extent": null,
      "status": null,
      "parent": "annex/1"
    },
    {
      "path": "annex/1/7",
      "kind": "article",
      "number": "7",
      "heading": null,
      "url": "https://openlegislation.uk/eu-regulation-2016-679/annex-1/7",
      "extent": null,
      "status": null,
      "parent": "annex/1"
    },
    {
      "path": "annex/1/8",
      "kind": "article",
      "number": "8",
      "heading": null,
      "url": "https://openlegislation.uk/eu-regulation-2016-679/annex-1/8",
      "extent": null,
      "status": null,
      "parent": "annex/1"
    },
    {
      "path": "annex/2",
      "kind": "annex",
      "number": "2",
      "heading": "PURPOSE LIMITATION: PROCESSING TO BE TREATED AS COMPATIBLE WITH ORIGINAL PURPOSE",
      "url": null,
      "extent": null,
      "status": null,
      "parent": null
    },
    {
      "path": "annex/2/1",
      "kind": "article",
      "number": "1",
      "heading": "Disclosure for purposes of processing described in Article 6(1)(e)",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/annex-2/1",
      "extent": null,
      "status": null,
      "parent": "annex/2"
    },
    {
      "path": "annex/2/2",
      "kind": "article",
      "number": "2",
      "heading": "Disclosure for the purposes of archiving in the public interest",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/annex-2/2",
      "extent": null,
      "status": null,
      "parent": "annex/2"
    },
    {
      "path": "annex/2/3",
      "kind": "article",
      "number": "3",
      "heading": "Public security",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/annex-2/3",
      "extent": null,
      "status": null,
      "parent": "annex/2"
    },
    {
      "path": "annex/2/4",
      "kind": "article",
      "number": "4",
      "heading": "Emergencies",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/annex-2/4",
      "extent": null,
      "status": null,
      "parent": "annex/2"
    },
    {
      "path": "annex/2/5",
      "kind": "article",
      "number": "5",
      "heading": null,
      "url": "https://openlegislation.uk/eu-regulation-2016-679/annex-2/5",
      "extent": null,
      "status": null,
      "parent": "annex/2"
    },
    {
      "path": "annex/2/6",
      "kind": "article",
      "number": "6",
      "heading": "Crime",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/annex-2/6",
      "extent": null,
      "status": null,
      "parent": "annex/2"
    },
    {
      "path": "annex/2/7",
      "kind": "article",
      "number": "7",
      "heading": "Protection of vital interests of data subjects and others",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/annex-2/7",
      "extent": null,
      "status": null,
      "parent": "annex/2"
    },
    {
      "path": "annex/2/8",
      "kind": "article",
      "number": "8",
      "heading": "Safeguarding vulnerable individuals",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/annex-2/8",
      "extent": null,
      "status": null,
      "parent": "annex/2"
    },
    {
      "path": "annex/2/9",
      "kind": "article",
      "number": "9",
      "heading": null,
      "url": "https://openlegislation.uk/eu-regulation-2016-679/annex-2/9",
      "extent": null,
      "status": null,
      "parent": "annex/2"
    },
    {
      "path": "annex/2/10",
      "kind": "article",
      "number": "10",
      "heading": null,
      "url": "https://openlegislation.uk/eu-regulation-2016-679/annex-2/10",
      "extent": null,
      "status": null,
      "parent": "annex/2"
    },
    {
      "path": "annex/2/11",
      "kind": "article",
      "number": "11",
      "heading": "Taxation",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/annex-2/11",
      "extent": null,
      "status": null,
      "parent": "annex/2"
    },
    {
      "path": "annex/2/12",
      "kind": "article",
      "number": "12",
      "heading": "Legal obligations",
      "url": "https://openlegislation.uk/eu-regulation-2016-679/annex-2/12",
      "extent": null,
      "status": null,
      "parent": "annex/2"
    }
  ],
  "outstanding_effects": [],
  "made_under": [],
  "changes_made_to": 5,
  "changes_made_to_url": "https://openlegislation.uk/eu-regulation-2016-679/changes.json",
  "changes_made_by": 0,
  "changes_made_by_url": "https://openlegislation.uk/eu-regulation-2016-679/changes/by-it.json",
  "instruments_made_under": 0,
  "instruments_made_under_url": "https://openlegislation.uk/eu-regulation-2016-679/instruments.json",
  "provenance": {
    "source": "legislation.gov.uk",
    "source_url": "https://www.legislation.gov.uk/eur/2016/679",
    "retrieved_at": "2026-11-01T14:45:51.683617+00:00"
  },
  "licence": "Open Government Licence v3.0",
  "licence_url": "https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/",
  "attribution": "Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives."
}