GDPR, forordning (EU) 2016/679

Vern av personopplysninger og fri flyt av slike data.

Hva vi leser den for

Rettsakten lesingen vår av åpne kilder måles mot: behandlingsgrunnlag, formålsbegrensning og rettighetene til personen en side nevner.

Identitet

99 artikler i grunnrettsakten

Struktur

Kapitteloverskriftene er oversatte navigasjonsetiketter. Den offisielle ordlyden finnes i EUR-Lex.

Artikler

99 artikler er lest inn i registeret, med én adresse hver.

• 1 · Subject-matter and objectives
• 2 · Material scope
• 3 · Territorial scope
• 4 · Definitions
• 5 · Principles relating to processing of personal data
• 6 · Lawfulness of processing
• 7 · Conditions for consent
• 8 · Conditions applicable to child's consent in relation to information society services
• 9 · Processing of special categories of personal data
• 10 · Processing of personal data relating to criminal convictions and offences
• 11 · Processing which does not require identification
• 12 · Transparent information, communication and modalities for the exercise of the rights of the data subject
• 13 · Information to be provided where personal data are collected from the data subject
• 14 · Information to be provided where personal data have not been obtained from the data subject
• 15 · Right of access by the data subject
• 16 · Right to rectification
• 17 · Right to erasure (‘right to be forgotten’)
• 18 · Right to restriction of processing
• 19 · Notification obligation regarding rectification or erasure of personal data or restriction of processing
• 20 · Right to data portability
• 21 · Right to object
• 22 · Automated individual decision-making, including profiling
• 23 · Restrictions
• 24 · Responsibility of the controller
• 25 · Data protection by design and by default
• 26 · Joint controllers
• 27 · Representatives of controllers or processors not established in the Union
• 28 · Processor
• 29 · Processing under the authority of the controller or processor
• 30 · Records of processing activities
• 31 · Cooperation with the supervisory authority
• 32 · Security of processing
• 33 · Notification of a personal data breach to the supervisory authority
• 34 · Communication of a personal data breach to the data subject
• 35 · Data protection impact assessment
• 36 · Prior consultation
• 37 · Designation of the data protection officer
• 38 · Position of the data protection officer
• 39 · Tasks of the data protection officer
• 40 · Codes of conduct
• 41 · Monitoring of approved codes of conduct
• 42 · Certification
• 43 · Certification bodies
• 44 · General principle for transfers
• 45 · Transfers on the basis of an adequacy decision
• 46 · Transfers subject to appropriate safeguards
• 47 · Binding corporate rules
• 48 · Transfers or disclosures not authorised by Union law
• 49 · Derogations for specific situations
• 50 · International cooperation for the protection of personal data
• 51 · Supervisory authority
• 52 · Independence
• 53 · General conditions for the members of the supervisory authority
• 54 · Rules on the establishment of the supervisory authority
• 55 · Competence
• 56 · Competence of the lead supervisory authority
• 57 · Tasks
• 58 · Powers
• 59 · Activity reports
• 60 · Cooperation between the lead supervisory authority and the other supervisory authorities concerned
• 61 · Mutual assistance
• 62 · Joint operations of supervisory authorities
• 63 · Consistency mechanism
• 64 · Opinion of the Board
• 65 · Dispute resolution by the Board
• 66 · Urgency procedure
• 67 · Exchange of information
• 68 · European Data Protection Board
• 69 · Independence
• 70 · Tasks of the Board
• 71 · Reports
• 72 · Procedure
• 73 · Chair
• 74 · Tasks of the Chair
• 75 · Secretariat
• 76 · Confidentiality
• 77 · Right to lodge a complaint with a supervisory authority
• 78 · Right to an effective judicial remedy against a supervisory authority
• 79 · Right to an effective judicial remedy against a controller or processor
• 80 · Representation of data subjects
• 81 · Suspension of proceedings
• 82 · Right to compensation and liability
• 83 · General conditions for imposing administrative fines
• 84 · Penalties
• 85 · Processing and freedom of expression and information
• 86 · Processing and public access to official documents
• 87 · Processing of the national identification number
• 88 · Processing in the context of employment
• 89 · Safeguards and derogations relating to processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes
• 90 · Obligations of secrecy
• 91 · Existing data protection rules of churches and religious associations
• 92 · Exercise of the delegation
• 93 · Committee procedure
• 94 · Repeal of Directive 95/46/EC
• 95 · Relationship with Directive 2002/58/EC
• 96 · Relationship with previously concluded Agreements
• 97 · Commission reports
• 98 · Review of other Union legal acts on data protection
• 99 · Entry into force and application

Språkversjoner

EUR-Lex publiserer rettsakten på alle offisielle språk. Dette er de direkte adressene for språkene dette nettstedet er skrevet på.

• Engelsk
• Svensk
• Tysk
• Alle offisielle språkversjoner
• Konsolidert tekst

Norsk er ikke et offisielt EU-språk. Norske lesere bruker det nasjonale registeret.

Nasjonal lov

Én linje per land. En linje finnes bare når en primærkilde er lest, ellers lenkes det nasjonale registeret i stedet.

Nasjonale gjennomføringstiltak på EUR-Lex

Tilsyn

• IMY, Sverige
• Datatilsynet, Norge
• EDPB, Det europeiske personvernrådet

Offisiell tekst

EUR-Lex · EU 2016/679

Hvem gjelder dette for

Registeret navngir fem roller. Åpne en rolle for å se pliktene rettsakten legger på den, hver rad med artikkel og kilde.

• Skytjenesteleverandør

Gjelder dette oss?

• Do ai governance rules apply to a cloud provider?
• Do personal data rules apply to a cloud provider?
• Do cross-border data rules apply to a cloud provider?
• Do cybersecurity rules apply to a cloud provider?
• Do health data rules apply to a cloud provider?
• Do online platforms rules apply to a cloud provider?

Alle roller i registeret · Alle spørsmål per rolle

EU-statistikk rettsakten berører

• Sysselsettingsgrad, 20 til 64 år (Art. 88): Medlemsstatene kan ha egne regler for personopplysninger i arbeidslivet.
• Arbeidsledighet (Art. 88): Medlemsstatene kan ha egne regler for personopplysninger i arbeidslivet.
• Arbeidsledighet, månedlig (Art. 88): Medlemsstatene kan ha egne regler for personopplysninger i arbeidslivet.
• Ungdomsledighet, 15 til 24 år (Art. 88): Medlemsstatene kan ha egne regler for personopplysninger i arbeidslivet.
• Arbeidskostnad per time (Art. 88): Medlemsstatene kan ha egne regler for personopplysninger i arbeidslivet.

GDPR-tilsyn per land

EU-rettsakter, lest helt ned til nasjonal lov

ExploreWorldAI is operated by Valkiv Ventures AB (Reg. no. 556995-1311), Kungsgatan 8, 111 43 Stockholm, Sweden. EU-hosted, with data processing assessed against the GDPR. Contact: hello@exploreworldai.com.

Machine-readable summaries for AI agents: /llms.txt and /llms-full.txt.