Article 30 Records of processing activities

Article 13 (Information to be provided where personal data are collected from the data subject); Article 14 (Information to be provided where personal data have not been obtained from the data subject); Article 15 (Right of access by the data subject); Article 24 (Responsibility of the controller); Article 32 (Security of processing); Article 35 (Data protection impact assessment); Article 37 (Designation of a data protection officer); Article 49 (Derogations for specific situations concerning transborder data flows); Article 83 (General conditions for imposing administrative fines)

Article 41 Monitoring of approved codes of conduct

Article 24 (Responsibility of the controller) (see too recitals 74–77, 83); Article 35 (Data protection impact assessment) (see too recital 84); Article 40 (Codes of conduct); Article 46 (Transfers subject to appropriate safeguards) (see too recitals 108–109); Article 57 (Tasks); Article 58 (Powers); Article 64 (Opinion of the Board); Article 70 (Tasks of the Board); Article 83 (General conditions for imposing administrative fines) (see too recitals 150–151); Article 93 (Committee procedure).

Article 17 Right to erasure (‘right to be forgotten’)

Article 5 (Principles relating to processing of personal data); Article 19 (Notification obligation regarding rectification or erasure of personal data or restriction of processing); Article 21 (Right to object) (see also recitals 69–70).

Article 9 Processing of special categories of personal data

Article 4(1) (Definition of personal data); Article 4(2) (Definition of processing); Article 4(11) (Definition of consent); Article 4(13) (Definition of genetic data, see also recital 34); Article 4(14) (Definition of biometric data); Article 4(15) (Definition of data concerning health, see also recital 35); Article 6(4)(c) (Lawfulness of processing, compatibility test) (see too recital 46 on vital interest); Article 13(2)(c) (Information to be provided where personal data are collected from the data subject); Article 17(1)(b), (3)(c) (Right to erasure (‘right to be forgotten’)); Article 20(1)(a) (Right to data portability); Article 22(4) (Automated individual decision-making, including profiling); Article 27(2)(a) (Representatives of controllers or processors not established in the Union); Article 30(5) (Records of processing activities); Article 35(3)(b) (Data protection impact assessment) (see too recital 91); Article 37(1)(c) (Designation of the data protection officer) (see too recital 97); Article 83(5)(a) (General conditions for imposing administrative fines).

Article 66 Urgency procedure

Article 4(21)–(22) (Definitions, supervisory authority and supervisory authority concerned); Article 60 (Cooperation between the lead supervisory authority and the other supervisory authorities concerned); Article 61 (Mutual assistance) (see too recital 133); Article 62 (Joint operations of supervisory authorities) (see too recital 134); Article 63 (Consistency mechanism) (see too recital 135); Article 64 (Opinion of the Board), Article 65 (Dispute resolution by the Board) (see too recital 136); Article 70 (Tasks of the Board) (see too recital 136).

Article 4(20). Binding corporate rules

Article 4(7) (Definition of ‘controller’); Article 4(8) (Definition of ‘processor’); Article 4(18) (Definition of ‘enterprise’); Article 4(19) (Definition of ‘group of undertakings’); Article 46(2)(b) (Transfers subject to appropriate safeguards); Article 47 (Binding corporate rules); Article 49 (Derogations for specific situations concerned with transfer of personal data to third countries and international organisations); Article 57(1)(s) (Supervisory authorities’ tasks); Article 58(3)(j) (Supervisory authorities’ powers); Article 64(1)(f) (Opinion of the Board); Article 70(1)(c) and (i) (Tasks of the Board).

Article 93 Committee procedure

Article 28(7) (Standard contractual clauses); Article 40(9) (Codes of conduct); Article 43(9) (Certification mechanisms); Article 45(3) and (5) (Adequacy decisions); Article 46(2)(c)–(d) (Standard data protection clauses); Article 47(3) (Binding corporate rules); Article 61(9) (Format and procedures for mutual assistance); Article 67 (Exchange of information); Article 70(1) and (3) (Tasks of the Board); and Article 92 (Exercise of the delegation).

Article 4(11). Consent

Article 5 (Principles relating to processing of personal data) (see also recitals 33, 39 and 50); Article 6(1)(a) (Lawfulness of processing on basis of consent) (see too recital 40); Article 7 (Conditions for consent) (see also recital 42); Article 8 (Conditions applicable to child’s consent in relation to information society services) (see too recital 38); Article 9(2)(a) (Processing of special categories of personal data on basis of consent) (see too recital 51); Article 13 (Information to be provided where personal data are collected from the data subject) (see too recitals 60–62); Article 14 (Information to be provided where personal data have not been obtained from the data subject); Article 17 (Right to erasure) (see too recital 65); Article 20 (Right to data portability) (see too recital 68); Article 22 (Automated individual decision-making, including profiling) (see too recital 71); Article 49(1)(a) (Transfer of personal data to third country or international organisation on basis of consent) (see too recitals 111–112).

Article 4(25). Information society service

Article 2(4) (Material scope) (see too recital 21); Article 8 (Conditions applicable to child’s consent in relation to information society services) (see too recital 38); Article 17(1)(f) (Right to erasure) (see too recital 65); Article 21(5) (Right to object) (see too recitals 69–70).

Article 68 European Data Protection Board

Article 57 (Tasks of supervisory authorities), Article 58 (Powers of supervisory authorities) (see too recital 129); Article 69 (Independence of the EDPB); Article 70 (Tasks of the EDPB); Article 71 (Reports); Article 72 (Procedure within the EDPB); Article 73 (Chair of the EDPB); Article 74 (Tasks of the Chair); Article 75 (Secretariat of the EDPB) (see too recitals 118 and 140); Article 76 (Confidentiality within the EDPB).