GDPR Articles Flashcards
1
Q
Article 1
A
Subject-matter and objectives
2
Q
Article 2
A
Material Scope
3
Q
Article 3
A
Territorial Scope
4
Q
Article 4
A
Definitions
5
Q
Article 5
A
Principles relating to processing of personal data
6
Q
Article 6
A
Lawfulness of processing
7
Q
Article 7
A
Conditions for consent
8
Q
Article 8
A
Conditions applicable to child’s consent in relation to information society services
9
Q
Article 9
A
Processing of special categories of personal data
10
Q
Article 10
A
Processing of personal data related to criminal convictions
11
Q
Article 11
A
Processing which does not require identification
12
Q
Article 12
A
Transparent information, communication and modalities for the exercise of rights of the data subject
13
Q
Article 13
A
Information to be provided where personal data are collected from the data subject
14
Q
Article 14
A
Information to be provided where personal data have not been obtained by the data subject
15
Q
Article 15
A
Right of access by the data subject
16
Q
Article 16
A
Right to rectification
17
Q
Article 17
A
Right of erasure (right to be forgotten)
18
Q
Article 18
A
Right to restriction of processing
19
Q
Article 19
A
Notification Obligation regarding rectification or erasure of personal data or restriction of processing
20
Q
Article 20
A
Right to data portability
21
Q
Article 21
A
Right to object
22
Q
Article 22
A
Automated individual decision-making, including profiling
23
Q
Article 23
A
Restrictions
24
Q
Article 24
A
Responsibility of the controller
25
Article 25
Data protection by design and default
26
Article 26
Joint controllers
27
Article 27
Representatives of controllers or processors not established in the Union
28
Article 28
Processor
29
Article 29
Processing under the authority of the controller or processor
30
Article 30
Records of processing activities
31
Article 31
Cooperation with the supervisory authority
32
Article 32
Security of processing
33
Article 33
Notification of personal data breach to the supervisory authority
34
Article 34
Communication of a personal data breach to the data subject
35
Article 35
Data protection impact assessment
36
Article 36
Prior Consultation
37
Article 37
Designation of the data protection officer
38
Article 38
Position of the data protection officer
39
Article 39
Tasks of the data protection officer
40
Article 40
Codes of conduct
41
Article 41
Monitoring approved codes of conduct
42
Article 42
Certification
43
Article 43
Certification bodies
44
Article 44
General principles for transfer
45
Article 45
Transfers on the basis of an adequacy decision
46
Article 46
Transfers subject to appropriate safeguards
47
Article 47
Binding corporate rules
48
Article 48
Transfers of disclosures not authorized by Union law
49
Article 49
Derogations for specific situations
50
Article 50
International cooperation for the protection of personal data
51
Article 51
Supervisory authority
52
Article 52
Tasks
53
Article 58
Powers
54
Article 59
Activity reports
55
Article 53
General conditions for the members of the supervisory authority
56
Article 54
Rules on the establishment of the supervisory authority
57
Article 55
Competence
58
Article 56
Competence of the lead supervisory authority
59
Article 57
Tasks
60
Article 60
Cooperation between the lead supervisory authority and the other supervisory authorities concerned
61
Article 61
Mutual Assistance
62
Article 62
Joint operations of supervisory authorities
63
Article 63
Consistency mechanism
64
Article 64
Opinion of the Board
65
Article 65
Disputed resolution by the Board of
66
Article 66
Urgency procedure
67
Article 67
Exchange of information
68
Article 68
European Data Protection Board
69
Article 69
Independence
70
Article 70
Tasks of the Board
71
Article 71
Reports
72
Article 72
Procedure
73
Article 73
Chair
74
Article 74
Tasks of the chair
75
Article 75
Secretariat
76
Article 76
Confidentiality
77
Article 77
Right to lodge a complaint with the supervisory authority
78
Article 78
Right to an effective judicial remedy against a supervisory authority
79
Article 79
Right to an effective judicial remedy against a controller or processor
80
Article 80
Representation of data subjects
81
Article 81
Suspension of procedings
82
Article 82
Right to compensation and liability
83
Article 83
General conditions for imposing administrative fines
84
Article 84
Penalties
85
Article 85
Processing and freedom of expression and information
86
Article 86
Processing and public access to official documents
87
Article 87
Processing of the national identification number
88
Article 88
Processing in the context of employment
89
Article 89
Safeguards and derogations relating to the processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes
90
Article 90
Obligations of secrecy
91
Article 91
Existing data protection rules of churches and religious associations
92
Article 92
Exercise of the delegation
93
Article 93
Committee procedure
94
Article 94
Repeal of Directive 95/46/EC
95
Article 95
Relationship with Directive 2002/58/EC - ePrivacy Directive
96
Article 96
Relationship with previously concluded Agreements
97
Article 97
Commission reports
98
Article 98
Review of other Union legal acts on data protection
99
Article 99
Entry into force and application
100
Recital 26
How to determine if a natural person is identifiable - there must be a reasonable likelihood
101
Recital 30
Information that constitutes an online identifier such as IP address, cookie, or radio frequency identification (RFID) may be used to create a person’s profile and identify them, demonstrating the breadth of content considered personal data
102
Recital 15
Clarifies that GDPR is intended to be technologically neutral
103
Recital 27
GDPR does not apply to the personal data of deceased persons which may be protected through the SCCs although member states may provide for rules in this area
104
Recital 22
The term establishment is not defined in GDPR but it implies that the effective and real exercise of activity through a stable arrangement - even a minimal one - in the context of which that processing is carried out
105
Recital 60
Data subject should be provided any information to ensure fair and transparent processing, taking into account the specific circumstances and context in which personal data are processed
106
Recital 67
The types of methods that can be used to restrict processing include temporarily moving the selected data to another processing system, making the selected personal data unavailable to users or temporarily removing published data from a website
