Regulation (EU) 2016/679 sets out the principles of processing, lawful bases, data subject rights, controller and processor duties, security of processing in Article 32, and the rules for international transfers.
The GDPR framework page covers its requirements.
Read more
Related terms
- Record of processing activities
- A record of processing activities is the GDPR Article 30 record of what personal data is processed, why, about whom, where it goes and for how long.
- Data protection impact assessment
- A data protection impact assessment is the GDPR Article 35 assessment a controller must carry out before processing likely to result in a high risk to people.
- Data processing agreement
- A data processing agreement is the contract GDPR Article 28 requires between a controller and a processor, setting how personal data may be handled.
- Standard contractual clauses
- Standard contractual clauses are the European Commission's model terms for transferring personal data from the EU to countries without an adequacy decision.