Summary CIPP/E Outline
Chapter 1 - ANSWER >>> General Provisions
Discusses the aim of the Regulation, the scope of the Regulation (where it
applies and who it applies to), and essential definitions
Article 1 - ANSWER >>> Subject-matter and objectives
This Regulation contains rules on processing personal data and the free
movement of personal data to protect the fundamental rights and freedoms
of natural persons and their right to protection of personal data
Article 2 - ANSWER >>> Material Scope
This Regulation applies to the processing of personal data which form part
of a filing system
Article 3 - ANSWER >>> Territorial Scope
This Regulation applies to controllers and processors in the Union and
controllers or processors not in the Union if they process personal data of
data subjects who live in the Union.
Article 4 - ANSWER >>> Definitions
This Article contains 26 essential definitions
Chapter 2 - ANSWER >>> Principles
Outlines the rules for processing and protecting personal data
Article 5 - ANSWER >>> Principles relating to processing of personal data
Personal data shall be processed lawfully, fairly, and in a transparent
manner; collected for specified, explicit, and legitimate purposes; be
adequate, relevant, and limited to what is necessary; etc
,Article 6 - ANSWER >>> Lawfulness of processing
There are six reasons that make processing lawful if at least one is true
(e.g. data subject has given consent, processing is necessary for the
performance of a contract, etc)
Article 7 - ANSWER >>> Conditions for Consent
When processing is based on consent, whoever controls the personal data
must prove consent to the processing, and the data subject can withdraw
consent at any time
Article 8 - ANSWER >>> Conditions applicable to child's consent in relation
to information societal services
Information society services can process personal data of a child if the child
is over 16. If the child is under 16, the legal guardian must consent
Article 9 - ANSWER >>> Processing special categories of personal data
Processing personal data revealing race, political opinions, religion,
philosophy, trade union membership, genetic data, health, sex life, and
sexual orientation is prohibited unless the subject gives explicit consent, it's
necessary to carry out the obligations of the controller, it's necessary to
protect the vital interests of the data subject, etc
Article 10 - ANSWER >>> Processing personal data related to criminal
convictions and offenses
Processing personal data related to criminal convictions can only be carried
out by an official authority or when Union or Member State law authorizes
the processing
Article 11 - ANSWER >>> Processing which does not require identification
The controller does not need to get or process additional information to
identify the data subject if the purpose for which the controller processes
data does not require the identification of a data subject
Chapter 3 - ANSWER >>> Rights of the data subject
, Discusses the rights of the data subject, including the right to be forgotten,
right to rectification, and right to restriction of processing
Chapter 3 Section 1 - ANSWER >>> Transparency and modalities of data
subjects rights
Article 12 - ANSWER >>> Transparent information, communications, and
modalities for the exercise of the rights of the data subject
When necessary, the controller must provide information in a concise,
transparent, intelligible and easily accessible form, using clear and plain
language, and the controller needs to provide information on action taken
on request by and to the data subject within one month
Chapter 3 Section 2 - ANSWER >>> Information and access to personal
data provided to data subject
Article 13 - ANSWER >>> Information to be provided where personal data
are collected from the data subject
When personal data is collected from the data subject, certain information
needs to be provided to the data subject
Article 14 - ANSWER >>> Information to provide to the data subject when
personal data has not been obtained from data subject
When personal data is not obtained from the data subject, the controller
has to provide the data subject with certain information
Article 15 - ANSWER >>> Right of access by the data subject
The data subject has a right to know whether their personal data is being
processed, what data is being processed, etc
Chapter 3 Section 3 - ANSWER >>> Rectification and Erasure for data
subjects
Article 16 - ANSWER >>> Right to rectification
Chapter 1 - ANSWER >>> General Provisions
Discusses the aim of the Regulation, the scope of the Regulation (where it
applies and who it applies to), and essential definitions
Article 1 - ANSWER >>> Subject-matter and objectives
This Regulation contains rules on processing personal data and the free
movement of personal data to protect the fundamental rights and freedoms
of natural persons and their right to protection of personal data
Article 2 - ANSWER >>> Material Scope
This Regulation applies to the processing of personal data which form part
of a filing system
Article 3 - ANSWER >>> Territorial Scope
This Regulation applies to controllers and processors in the Union and
controllers or processors not in the Union if they process personal data of
data subjects who live in the Union.
Article 4 - ANSWER >>> Definitions
This Article contains 26 essential definitions
Chapter 2 - ANSWER >>> Principles
Outlines the rules for processing and protecting personal data
Article 5 - ANSWER >>> Principles relating to processing of personal data
Personal data shall be processed lawfully, fairly, and in a transparent
manner; collected for specified, explicit, and legitimate purposes; be
adequate, relevant, and limited to what is necessary; etc
,Article 6 - ANSWER >>> Lawfulness of processing
There are six reasons that make processing lawful if at least one is true
(e.g. data subject has given consent, processing is necessary for the
performance of a contract, etc)
Article 7 - ANSWER >>> Conditions for Consent
When processing is based on consent, whoever controls the personal data
must prove consent to the processing, and the data subject can withdraw
consent at any time
Article 8 - ANSWER >>> Conditions applicable to child's consent in relation
to information societal services
Information society services can process personal data of a child if the child
is over 16. If the child is under 16, the legal guardian must consent
Article 9 - ANSWER >>> Processing special categories of personal data
Processing personal data revealing race, political opinions, religion,
philosophy, trade union membership, genetic data, health, sex life, and
sexual orientation is prohibited unless the subject gives explicit consent, it's
necessary to carry out the obligations of the controller, it's necessary to
protect the vital interests of the data subject, etc
Article 10 - ANSWER >>> Processing personal data related to criminal
convictions and offenses
Processing personal data related to criminal convictions can only be carried
out by an official authority or when Union or Member State law authorizes
the processing
Article 11 - ANSWER >>> Processing which does not require identification
The controller does not need to get or process additional information to
identify the data subject if the purpose for which the controller processes
data does not require the identification of a data subject
Chapter 3 - ANSWER >>> Rights of the data subject
, Discusses the rights of the data subject, including the right to be forgotten,
right to rectification, and right to restriction of processing
Chapter 3 Section 1 - ANSWER >>> Transparency and modalities of data
subjects rights
Article 12 - ANSWER >>> Transparent information, communications, and
modalities for the exercise of the rights of the data subject
When necessary, the controller must provide information in a concise,
transparent, intelligible and easily accessible form, using clear and plain
language, and the controller needs to provide information on action taken
on request by and to the data subject within one month
Chapter 3 Section 2 - ANSWER >>> Information and access to personal
data provided to data subject
Article 13 - ANSWER >>> Information to be provided where personal data
are collected from the data subject
When personal data is collected from the data subject, certain information
needs to be provided to the data subject
Article 14 - ANSWER >>> Information to provide to the data subject when
personal data has not been obtained from data subject
When personal data is not obtained from the data subject, the controller
has to provide the data subject with certain information
Article 15 - ANSWER >>> Right of access by the data subject
The data subject has a right to know whether their personal data is being
processed, what data is being processed, etc
Chapter 3 Section 3 - ANSWER >>> Rectification and Erasure for data
subjects
Article 16 - ANSWER >>> Right to rectification
