Data Privacy
GDPR Article 34: Communication of Data Breach to Data Subject
GDPR Article 34 requires communicating personal data breaches to affected data subjects when there's high risk. Threshold, content, exemptions, timing.
July 10, 20268 min
Complete archive
English articles
Page 7 of 12
Data Privacy
GDPR Article 6: The 6 Lawful Bases for Processing
GDPR Article 6 sets out the six lawful bases for processing personal data: consent, contract, legal obligation, vital interests, public task, legitimate interests.
July 10, 20267 min
Data Privacy
GDPR Article 7: Conditions for Valid Consent
GDPR Article 7 sets out conditions for valid consent: demonstrability, intelligible request, easy withdrawal, and freely given. Practical implementation guide.
July 10, 20268 min
Data Privacy
GDPR Article 9: Processing Special Categories of Data
GDPR Article 9 prohibits processing of special category data (health, biometrics, religion, etc.) except under 10 specific conditions including explicit consent.
July 10, 20267 min
Data Privacy
GDPR Articles Index: Article-by-Article Guide
Complete index of GDPR articles with deep-dive guides on each. Organised by topic: principles, lawful basis, rights, controllers, transfers, supervision.
July 10, 20264 min
Data Privacy
GDPR Article 16: Right to Rectification
GDPR Article 16 gives data subjects the right to have inaccurate personal data corrected and incomplete data completed. Procedure, deadlines, and exceptions.
July 10, 20266 min
Data Privacy
GDPR Article 24: Responsibility of the Controller
GDPR Article 24 imposes the accountability obligation on the controller. Risk-based approach, technical and organisational measures, documentation, demonstrability.
July 10, 20266 min
Data Privacy
GDPR Article 27: Representatives of Non-EU Controllers
GDPR Article 27 requires non-EU controllers targeting EU data subjects to designate an EU representative. Obligations, exemptions, and how to comply in 2026.
July 10, 20268 min
Data Privacy
GDPR Article 33: Personal Data Breach Notification (72 Hours)
GDPR Article 33: notify the supervisory authority within 72 hours of a personal data breach. Process, content, exemptions, and enforcement.
July 10, 20267 min
Data Privacy
GDPR Article 36: Prior Consultation with Supervisory Authority
GDPR Article 36 requires prior consultation with the supervisory authority when a DPIA shows high residual risk. Process, timeline, content, and consequences.
July 10, 20266 min
Data Privacy
GDPR Article 4: The 26 Definitions That Power the Regulation
GDPR Article 4 defines 26 key terms: personal data, processing, controller, processor, consent, pseudonymization, biometric, profiling. Reference glossary.
July 10, 20268 min
Data Privacy
GDPR Article 44: General Principle for International Transfers
GDPR Article 44 sets the general principle for international data transfers: protection must not be undermined. Safeguards hierarchy, adequacy, derogations.
July 10, 20267 min
Data Privacy
GDPR Article 83: Administrative Fines Structure and Calculation
GDPR Article 83 governs administrative fines: two tiers (up to €10M/2% or €20M/4%), 11 calculation criteria, and the EDPB Guidelines 04/2022 methodology.
July 10, 20267 min
Data Privacy
UK GDPR vs EU GDPR: Divergence Map 2026
UK GDPR vs EU GDPR in 2026: Data (Use and Access) Act changes, adequacy status, ICO vs EDPB approach, and the key compliance divergences that matter.
July 10, 20267 min
Data Privacy
FADP vs GDPR: Breach Notification, Sanctions, Authorities
Swiss FADP vs GDPR comparison: breach notification deadlines, sanctions up to CHF 250k, supervisory authorities (FDPIC, EDPB), key differences 2026.
July 10, 20265 min
Data Privacy
GDPR Article 20 Right to Data Portability: Official Text
GDPR Article 20 right to data portability: official text, scope, machine-readable format, EDPB WP242 guidance, deadlines, sanctions, implementation checklist.
July 10, 20265 min
Data Privacy
GDPR Article 21 Right to Object: Direct Marketing Text
GDPR Article 21 right to object: official text, absolute right for direct marketing, profiling, opt-out mechanics, sanctions, EDPB guidance.
July 10, 20265 min
Data Privacy
EUR-Lex GDPR Article 33: 72 Hours Breach Notification
GDPR Article 33 official text from EUR-Lex: 72-hour breach notification deadline, content requirements, EDPB Guidelines 9/2022, sanctions, examples.
July 10, 20266 min