Chapter I — General provisions
Chapter II — Principles
Chapter III — Rights of the data subject
Chapter IV — Controller and processor
Chapter V — Transfers of personal data to third countries or international organisations
Chapter VI — Independent supervisory authorities
Chapter VII — Cooperation
Chapter VIII — Remedies, liability and penalties
Chapter IX — Implementing acts
Chapter X — Final provisions
Recitals 89 / 107
Penalties should be imposed on any natural or legal person, whether governed by private or public law, who infringes this Directive. Member States should ensure that the penalties are effective, proportionate and dissuasive and should take all measures to implement the penalties.