Regulation (EU) 2018/1725 of the European Parliament and of the Council of 23 October 2018 on the protection of natural persons with regard to the processing of personal data by the Union institutions, bodies, offices and agencies and on the free movement of such data, and repealing Regulation (EC) No 45/2001 and Decision No 1247/2002/EC (Text with EEA relevance) (revoked)

EU Regulation 2018/1725 · Adopted 23 October 2018 · Extends to United Kingdom

Contents

1. Chapter I: GENERAL PROVISIONS Repealed
2. 1Subject matter and objectives Repealed
3. 2Scope Repealed
4. 3Definitions Repealed
5. Chapter II: GENERAL PRINCIPLES Repealed
6. 4Principles relating to processing of personal data Repealed
7. 5Lawfulness of processing Repealed
8. 6Processing for another compatible purpose Repealed
9. 7Conditions for consent Repealed
10. 8Conditions applicable to a child’s consent in relation to information society services Repealed
11. 9Transmissions of personal data to recipients established in the Union other than Union institutions and bodies Repealed
12. 10Processing of special categories of personal data Repealed
13. 11Processing of personal data relating to criminal convictions and offences Repealed
14. 12Processing which does not require identification Repealed
15. 13Safeguards relating to processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes Repealed
16. Chapter III: RIGHTS OF THE DATA SUBJECT Repealed
17. Transparency and modalities Repealed
18. 14Transparent information, communication and modalities for the exercise of the rights of the data subject Repealed
19. Information and access to personal data Repealed
20. 15Information to be provided where personal data are collected from the data subject Repealed
21. 16Information to be provided where personal data have not been obtained from the data subject Repealed
22. 17Right of access by the data subject Repealed
23. Rectification and erasure Repealed
24. 18Right to rectification Repealed
25. 19Right to erasure (‘right to be forgotten’) Repealed
26. 20Right to restriction of processing Repealed
27. 21Notification obligation regarding rectification or erasure of personal data or restriction of processing Repealed
28. 22Right to data portability Repealed
29. Right to object and automated individual decision-making Repealed
30. 23Right to object Repealed
31. 24Automated individual decision-making, including profiling Repealed
32. Restrictions Repealed
33. 25Restrictions Repealed
34. Chapter IV: CONTROLLER AND PROCESSOR Repealed
35. General obligations Repealed
36. 26Responsibility of the controller Repealed
37. 27Data protection by design and by default Repealed
38. 28Joint controllers Repealed
39. 29Processor Repealed
40. 30Processing under the authority of the controller or processor Repealed
41. 31Records of processing activities Repealed
42. 32Cooperation with the European Data Protection Supervisor Repealed
43. Security of personal data Repealed
44. 33Security of processing Repealed
45. 34Notification of a personal data breach to the European Data Protection Supervisor Repealed
46. 35Communication of a personal data breach to the data subject Repealed
47. Confidentiality of electronic communications Repealed
48. 36Confidentiality of electronic communications Repealed
49. 37Protection of information transmitted to, stored in, related to, processed by and collected from users’ terminal equipment Repealed
50. 38Directories of users Repealed
51. Data protection impact assessment and prior consultation Repealed
52. 39Data protection impact assessment Repealed
53. 40Prior consultation Repealed
54. Information and legislative consultation Repealed
55. 41Information and consultation Repealed
56. 42Legislative consultation Repealed
57. Data protection officer Repealed
58. 43Designation of the data protection officer Repealed
59. 44Position of the data protection officer Repealed
60. 45Tasks of the data protection officer Repealed
61. Chapter V: TRANSFERS OF PERSONAL DATA TO THIRD COUNTRIES OR INTERNATIONAL ORGANISATIONS Repealed
62. 46General principle for transfers Repealed
63. 47Transfers on the basis of an adequacy decision Repealed
64. 48Transfers subject to appropriate safeguards Repealed
65. 49Transfers or disclosures not authorised by Union law Repealed
66. 50Derogations for specific situations Repealed
67. 51International cooperation for the protection of personal data Repealed
68. Chapter VI: EUROPEAN DATA PROTECTION SUPERVISOR Repealed
69. 52European Data Protection Supervisor Repealed
70. 53Appointment of the European Data Protection Supervisor Repealed
71. 54Regulations and general conditions governing the performance of the European Data Protection Supervisor’s duties, staff and financial resources Repealed
72. 55Independence Repealed
73. 56Professional secrecy Repealed
74. 57Tasks Repealed
75. 58Powers Repealed
76. 59Obligation of controllers and processors to react to allegations Repealed
77. 60Activities report Repealed
78. Chapter VII: COOPERATION AND CONSISTENCY Repealed
79. 61Cooperation between the European Data Protection Supervisor and national supervisory authorities Repealed
80. 62Coordinated supervision by the European Data Protection Supervisor and national supervisory authorities Repealed
81. Chapter VIII: REMEDIES, LIABILITY AND PENALTIES Repealed
82. 63Right to lodge a complaint with the European Data Protection Supervisor Repealed
83. 64Right to an effective judicial remedy Repealed
84. 65Right to compensation Repealed
85. 66Administrative fines Repealed
86. 67Representation of data subjects Repealed
87. 68Complaints by Union staff Repealed
88. 69Sanctions Repealed
89. Chapter IX: PROCESSING OF OPERATIONAL PERSONAL DATA BY UNION BODIES, OFFICES AND AGENCIES WHEN CARRYING OUT ACTIVITIES WHICH FALL WITHIN THE SCOPE OF CHAPTER 4 OR CHAPTER 5 OF TITLE V OF PART THREE TFEU Repealed
90. 70Scope of the Chapter Repealed
91. 71Principles relating to processing of operational personal data Repealed
92. 72Lawfulness of processing of operational personal data Repealed
93. 73Distinction between different categories of data subjects Repealed
94. 74Distinction between operational personal data and verification of the quality of operational personal data Repealed
95. 75Specific processing conditions Repealed
96. 76Processing of special categories of operational personal data Repealed
97. 77Automated individual decision-making, including profiling Repealed
98. 78Communication and modalities for exercising the rights of the data subject Repealed
99. 79Information to be made available or given to the data subject Repealed
100. 80Right of access by the data subject Repealed
101. 81Limitations to the right of access Repealed
102. 82Right to rectification or erasure of operational personal data and restriction of processing Repealed
103. 83Right of access in criminal investigations and proceedings Repealed
104. 84Exercise of rights by the data subject and verification by the European Data Protection Supervisor Repealed
105. 85Data protection by design and by default Repealed
106. 86Joint controllers Repealed
107. 87Processor Repealed
108. 88Logging Repealed
109. 89Data protection impact assessment Repealed
110. 90Prior consultation of the European Data Protection Supervisor Repealed
111. 91Security of processing of operational personal data Repealed
112. 92Notification of a personal data breach to the European Data Protection Supervisor Repealed
113. 93Communication of a personal data breach to the data subject Repealed
114. 94Transfer of operational personal data to third countries and international organisations Repealed
115. 95Secrecy of judicial inquiries and criminal proceedings Repealed
116. Chapter X: IMPLEMENTING ACTS Repealed
117. 96Committee procedure Repealed
118. Chapter XI: REVIEW Repealed
119. 97Review clause Repealed
120. 98Review of Union legal acts Repealed
121. Chapter XII: FINAL PROVISIONS Repealed
122. 99Repeal of Regulation (EC) No 45/2001 and of Decision No 1247/2002/EC Repealed
123. 100Transitional measures Repealed
124. 101Entry into force and application Repealed
125. Signature