Search results

to Article 42(7); (p) specify the requirements referred to in Article 43(3) with a view to the accreditation of certification bodies under Article 42;

compliance. Article 40 GDPR elaborates upon a pre-existing provision under the Directive 95/46/EC (Data Protection Directive – DPD), specifically Article 27(1)

decisions in Category:Article 74 GDPR For more on this point, see Article 72 GDPR. Dix in Kühling, Buchner, DS-GVO BDSG, Article 74 GDPR, margin number

deliberations of the Board's predecessor, the Article 29 Working Party (“WP29”), were wholly privileged. Under Article 11(1) of WP29's Rules of Procedure, any

rules, do not fall within the scope of this article. → You can find all related decisions in Category:Article 48 GDPR Kuner, in Kuner, Bygrave, Docksey,

remedies. CJEU: The CJEU has clarified in C-132/21 that "Article 77(1), Article 78(1) and Article 79(1) of Regulation (EU) 2016/679 [...] must be interpreted

referred to in Article 64. Those implementing acts shall be adopted in accordance with the examination procedure referred to in Article 93(2). Recital

unlike delegated acts made under Article 92 GDPR. Article 93(2) GDPR explicitly provides for the application of Article 5 of Regulation (EU) No 182/2011

protection principles (Article 5), determination of the legal basis for processing (Article 6), implementation of security measures (Article 32), notification

although a somewhat similar protection could already be found in Article 12(2) of Directive 95/46 (DPD). That provision gave data subjects the possibility to

that falls outside the scope of Article 57 GDPR should be deemed inadmissible for the purposes of Article 31 GDPR. Article 31 GDPR can be read as a supporting

restriction of processing carried out in accordance with Article 16, Article 17(1) and Article 18 to each recipient to whom the personal data have been

the exchange of knowledge between them. This way, Article 50 GDPR expands the exhortation under Article 57(1)(g) GDPR that calls for cooperation between

confidentiality obligations were already in place under Article 28(7) of the GDPR's predecessor, Directive 95/46/EC. Article 54(1) GDPR mandates Member States to provide

right to receive compensation under Article 82 GDPR was not included in the initial draft of Article 80 GDPR (then Article 73) and was only inserted later

assessment should not be mandatory. Article 22 GDPR has its roots in Articles 12a and 15 of the 95/46/EC Data Protection Directive (DPD). One of the main differences

and 14 GDPR), access (Article 15 GDPR), rectification (Article 16 GDPR), erasure (Article 17 GDPR), restriction of processing (Article 18 GDPR), notification

information in the course of an investigation, in accordance with Article 58(1) GDPR. Article 90 GDPR was drafted with a view to regulate potential conflicts

Category:Article 37 GDPR The notion of appointing a DPO has its roots in Article 18(2) of the Data Protection Directive 1995 (Directive 95/46/EC) (DPD)

under the terms referred to in Article 46(2)(f) GDPR. One substantial difference between Article 42(1) GDPR and Article 42(2) GDPR is that in the former