Section 1General obligations

1. Taking into account the nature, scope, context and purposes of processing as well as the risks of varying likelihood and severity for the rights and freedoms of…

1. Taking into account the state of the art, the cost of implementation and the nature, scope, context and purposes of processing as well as the risks of…

1. Where two or more controllers jointly determine the purposes and means of processing, they shall be joint controllers. They shall in a transparent manner determine their respective…

1. Where Article 3(2) applies, the controller or the processor shall designate in writing a representative in the United Kingdom. 2. The obligation laid down in paragraph 1…

1. Where processing is to be carried out on behalf of a controller, the controller shall use only processors providing sufficient guarantees to implement appropriate technical and organisational…

The processor and any person acting under the authority of the controller or of the processor, who has access to personal data, shall not process those data except…

1. Each controller and, where applicable, the controller's representative, shall maintain a record of processing activities under its responsibility. That record shall contain all of the following information:…

The controller and the processor and, where applicable, their representatives, shall cooperate, on request, with the Commission in the performance of the Commission's tasks.