Directive (EU) 2016/680
Law Enforcement Directive
Directive (EU) 2016/680 on the protection of natural persons with regard to the processing of personal data by competent authorities
In force since May 5, 2016|Published in the Official Journal on May 4, 2016|65 articles · 0 annexes · 107 recitals
Articles↓
Chapter I — General provisions
Chapter II — Principles
- 4Principles relating to processing of personal data
- 5Time-limits for storage and review
- 6Distinction between different categories of data subject
- 7Distinction between personal data and verification of quality of personal data
- 8Lawfulness of processing
- 9Specific processing conditions
- 10Processing of special categories of personal data
- 11Automated individual decision-making
Chapter III — Rights of the data subject
- 12Communication and modalities for exercising the rights of the data subject
- 13Information to be made available or given to the data subject
- 14Right of access by the data subject
- 15Limitations to the right of access
- 16Right to rectification or erasure of personal data and restriction of processing
- 17Exercise of rights by the data subject and verification by the supervisory authority
- 18Rights of the data subject in criminal investigations and proceedings
Chapter IV — Controller and processor
- 19Obligations of the controller
- 20Data protection by design and by default
- 21Joint controllers
- 22Processor
- 23Processing under the authority of the controller or processor
- 24Records of processing activities
- 25Logging
- 26Cooperation with the supervisory authority
- 27Data protection impact assessment
- 28Prior consultation of the supervisory authority
- 29Security of processing
- 30Notification of a personal data breach to the supervisory authority
- 31Communication of a personal data breach to the data subject
- 32Designation of the data protection officer
- 33Position of the data protection officer
- 34Tasks of the data protection officer
Chapter V — Transfers of personal data to third countries or international organisations
- 35General principles for transfers of personal data
- 36Transfers on the basis of an adequacy decision
- 37Transfers subject to appropriate safeguards
- 38Derogations for specific situations
- 39Transfers of personal data to recipients established in third countries
- 40International cooperation for the protection of personal data
Chapter VI — Independent supervisory authorities
Chapter VII — Cooperation
Chapter VIII — Remedies, liability and penalties
Chapter IX — Implementing acts
Chapter X — Final provisions
Preamble · Recitals
Recitals (1-107)
Chapter (10)
65 articlesChapter IArt. 1–3
General provisions
Art. 1
Chapter IIArt. 4–11
Principles
Art. 4
Chapter IIIArt. 12–18
Rights of the data subject
Art. 12
Chapter IVArt. 19–34
Controller and processor
Art. 19
Chapter VArt. 35–40
Transfers of personal data to third countries or international organisations
Art. 35
Chapter VIArt. 41–49
Independent supervisory authorities
Art. 41
Chapter VIIArt. 50–51
Cooperation
Art. 50
Chapter VIIIArt. 52–57
Remedies, liability and penalties
Art. 52
Chapter IXArt. 58
Implementing acts
Art. 58
Chapter XArt. 59–65
Final provisions
Art. 59
Final formula
Done at Brussels, 27 April 2016.
For the European Parliament
The President
M. SCHULZ
For the Council
The President
J.A. HENNIS-PLASSCHAERT