Art. 28 GDPR – Processor
Art. 28 GDPR Processor Where processing is to be carried out on behalf of a controller, the controller shall use only processors providing sufficient guarantees to implement appropriate technical…
Art. 28 GDPR Processor Where processing is to be carried out on behalf of a controller, the controller shall use only processors providing sufficient guarantees to implement appropriate technical…
Art. 27 GDPRRepresentatives of controllers or processors not established in the Union Where Article 3(2) applies, the controller or the processor shall designate in writing a representative in the…
Art. 26 GDPR Joint controllers Where two or more controllers jointly determine the purposes and means of processing, they shall be joint controllers. They shall in a transparent manner…
Art. 25 GDPR Data protection by design and by default Taking into account the state of the art, the cost of implementation and the nature, scope, context and purposes…
Art. 24 GDPR Responsibility of the controller Taking into account the nature, scope, context and purposes of processing as well as the risks of varying likelihood and severity for…
Recital 169Immediately applicable implementing acts The Commission should adopt immediately applicable implementing acts where available evidence reveals that a third country, a territory or a specified sector within that…
Recital 172 Consultation of the European Data Protection Supervisor The European Data Protection Supervisor was consulted in accordance with Article 28(2) of Regulation (EC) No 45/2001 and delivered an…
Recital 168Implementing acts on standard contractual clauses The examination procedure should be used for the adoption of implementing acts on standard contractual clauses between controllers and processors and between…
Recital 167 Implementing powers of the Commission In order to ensure uniform conditions for the implementation of this Regulation, implementing powers should be conferred on the Commission when provided…
Recital 163 Production of European and national statistics The confidential information which the Union and national statistical authorities collect for the production of official European and official national statistics…
Recital 171 Repeal of Directive 95/46/EC and transitional provisions Directive 95/46/EC should be repealed by this Regulation. Processing already under way on the date of application of this Regulation…
Recital 170 Principle of subsidiarity and principle of proportionality Since the objective of this Regulation, namely to ensure an equivalent level of protection of natural persons and the free…
Recital 162 Processing for statistical purposes Where personal data are processed for statistical purposes, this Regulation should apply to that processing. Union or Member State law should, within the…
Recital 150 Administrative fines In order to strengthen and harmonise administrative penalties for infringements of this Regulation, each supervisory authority should have the power to impose administrative fines. This…
Recital 151 Administrative fines in Denmark and Estonia The legal systems of Denmark and Estonia do not allow for administrative fines as set out in this Regulation. The rules…
Recital 152 Power of sanction of the Member States Where this Regulation does not harmonise administrative penalties or where necessary in other cases, for example in cases of serious…
Recital 156 Processing for archiving, scientific or historical research or statistical purposes The processing of personal data for archiving purposes in the public interest, scientific or historical research purposes…
Recital 157 Information from registries and scientific research By coupling information from registries, researchers can obtain new knowledge of great value with regard to widespread medical conditions such as…
Recital 158 Processing for archiving purposes Where personal data are processed for archiving purposes, this Regulation should also apply to that processing, bearing in mind that this Regulation should…
Recital 159 Processing for scientific research purposes Where personal data are processed for scientific research purposes, this Regulation should also apply to that processing. For the purposes of this…
Recital 160 Processing for historical research purposes Where personal data are processed for historical research purposes, this Regulation should also apply to that processing. This should also include historical…