UK General Data Protection Regulation (UK GDPR)

• Article 1 Subject-matter and objectives
• Article 2 Material scope
• Article 3 Territorial scope
• Article 4 Definitions

• Article 5 Principles relating to processing of personal data
• Article 6 Lawfulness of processing
• Article 7 Conditions for consent
• Article 8 Conditions applicable to child's consent in relation to information society services
• Article 9 Processing of special categories of personal data
• Article 10 Processing of personal data relating to criminal convictions and offences
• Article 11 Processing which does not require identification

Section 1: Transparency and modalities

• Article 12 Transparent information, communication and modalities for the exercise of the rights of the data subject

Section 2: Information and access to personal data

• Article 13 Information to be provided where personal data are collected from the data subject
• Article 14 Information to be provided where personal data have not been obtained from the data subject
• Article 15 Right of access by the data subject

Section 3: Rectification and erasure

• Article 16 Right to rectification
• Article 17 Right to erasure (‘right to be forgotten’)
• Article 18 Right to restriction of processing
• Article 19 Notification obligation regarding rectification or erasure of personal data or restriction of processing
• Article 20 Right to data portability

Section 4: Right to object and automated individual decision-making

• Article 21 Right to object

Section 5: Restrictions

• Article 23 Restrictions

Section 1: General obligations

• Article 24 Responsibility of the controller
• Article 25 Data protection by design and by default
• Article 26 Joint controllers
• Article 27 Representatives of controllers or processors not established in the United Kingdom
• Article 28 Processor
• Article 29 Processing under the authority of the controller or processor
• Article 30 Records of processing activities
• Article 31 Cooperation with the Commissioner

Section 2: Security of personal data

• Article 32 Security of processing
• Article 33 Notification of a personal data breach to the Commissioner
• Article 34 Communication of a personal data breach to the data subject

Section 3: Data protection impact assessment and prior consultation

• Article 35 Data protection impact assessment
• Article 36 Prior consultation

Section 4: Data protection officer

• Article 37 Designation of the data protection officer
• Article 38 Position of the data protection officer
• Article 39 Tasks of the data protection officer

Section 5: Codes of conduct and certification

• Article 40 Codes of conduct
• Article 41 Monitoring of approved codes of conduct
• Article 42 Certification
• Article 43 Certification bodies

• Article 46 Transfers subject to appropriate safeguards
• Article 47 Transfers subject to appropriate safeguards: Binding corporate rules
• Article 49 Derogations for specific situations
• Article 50 International cooperation for the protection of personal data

Section 1: Independent status

• Article 51 Monitoring the application of this Regulation
• Article 52 Independence

Section 2: Competence, tasks and powers

• Article 57 Tasks
• Article 58 Powers

• Article 78 Right to an effective judicial remedy against the Commissioner
• Article 79 Right to an effective judicial remedy against a controller or processor
• Article 80 Representation of data subjects
• Article 82 Right to compensation and liability
• Article 83 General conditions for imposing administrative fines
• Article 84 Penalties

• Article 85 Processing and freedom of expression and information
• Article 86 Processing and public access to official documents

• Article 94 Repeal of Directive 95/46/EC
• Article 95 Relationship with domestic law made before IP completion day implementing Directive 2002/58/EC of the European Parliament and of the Council of 12th July 2002 concerning the processing of personal data and the protection of privacy in the electronic communications sector
• Article 96 Relationship with previously concluded Agreements