a ; "General Data Protection Regulation (EU) 2016/679"@en; "EU"; , ; ; . a ; "1 Subject-matter and objectives"@en; ; "4e560b5735273f4568d1cb6a34bad72c476f4701965b611ab24050c9880cf50c"; "Protection of natural persons' rights and freedoms regarding personal data processing."; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.32"; . a ; ; ; ; "borne by: State"; ; . . a ; ; "shall"; "Imposes a duty."; "modalities::logic::deontic"; 1.0000; . a ; "2 Material scope"@en; ; "b329de638f3d68ffc06c93614b130d52835a14ecf377817008440153f17baff1"; "Scope of application"; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.32"; . a ; ; ; ; "borne by: State"; ; . . a ; ; "includes"; "Includes certain activities outside the scope of Union law"; "Article 2(1)"; "Excluded from application"; "modalities::logic::deontic"; 1.0000; . . a ; ; "subClassOf"; "Subclass of filing systems and personal data intended to form a filing system"; "Article 2(3)"; "Filing systems and personal data"; "modalities::dl"; 1.0000; . . a ; ; "overlaps"; "Overlaps with Directive 2000/31/EC"; "Article 4"; "Liability rules of intermediary service providers"; "modalities::interval_reasoning"; 1.0000; . a ; "3 Territorial scope"@en; ; "b0ffbd7a790a025a4ea86d75499fc5e14086901f5d4f5715947c2369fc001f56"; "Regulation applies to processing of personal data in Union and non-Union territories."; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.32"; . a ; ; ; ; "borne by: State"; ; . . a ; ; "applies"; "Regulation applies to specified territories."; "modalities::logic::deontic"; 1.0000; . a ; "4 Definitions"@en; ; "35478bf7abaead6693bf337b8f9be96319aa3c47c2f9f2f00409391a44033f2f"; , , , , , , , , , , , , , , , , , , , , , , , , , ; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.33". a ; "4(1) Definitions"@en; ; "6c83c782582d024362bd7d882095e6248d63c2c851d2348269ef76eb14b49b5d"; ; "Definition of personal data"; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.33"; . a ; ; ; ; "held by: State"; ; . a ; "4(2) Definitions"@en; ; "20313013d6dfee06dbf852583c7f9320777a96fcb9bc0b3e7565ed736a7f6d0f"; ; "Defines 'processing' as any operation performed on personal data."; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.33"; . a ; ; ; ; "borne by: State"; ; . . a ; ; "Obligate"; "Defines 'processing' as any operation performed on personal data."; "modalities::logic::deontic"; 1.0000; . . a ; ; "="; "Explicit class hierarchy"; "modalities::dl"; 1.0000; . . a ; ; "during"; "Temporal interval"; "modalities::interval_reasoning"; 1.0000; . a ; "4(3) Definitions"@en; ; "a527c704c83a2d01f8b3b421c189c9815d788f886c55f3c24a4260f045c767b7"; ; "Definition of 'restriction of processing'"; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.33"; . a ; ; ; ; "borne by: State"; ; . a ; "4(4) Definitions"@en; ; "76d5a50441de049b768d5c485e9882ac5d85e3e56a9326f6714968e01dc1e601"; ; "Defines profiling as automated processing of personal data for certain aspects."; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.33"; . a ; ; ; ; "borne by: State"; ; . . a ; ; "Obligate"; "Defines profiling as automated processing of personal data for certain aspects."; "modalities::logic::deontic"; 1.0000; . . a ; ; "="; "Explicit class hierarchy"; "(4) ‘profiling’ means..."; "...personal data to evaluate certain personal aspects relating to a natural person..."; "modalities::dl"; 1.0000; . . a ; ; "between"; "Temporal interval"; "(4) ‘profiling’ means..."; "...evaluating or predicting aspects concerning that natural person's performance at work..."; "modalities::interval_reasoning"; 1.0000; . a ; "4(5) Definitions"@en; ; "f72f94d2c2bd16e5f93943b34305e617a9d2bfa3202734215662e0dcab1c8b26"; ; "Definition of pseudonymisation"; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.33"; . a ; ; ; ; ; . . a ; ; "Obligate"; "Definition of pseudonymisation"; "modalities::logic::deontic"; 1.0000; . . a ; ; "="; "Classifies data into categories"; "(5) ‘pseudonymisation’ means the processing of personal data in such a manner that..."; "the personal data can no longer be attributed to a specific data subject without the use of additional information"; "modalities::dl"; 1.0000; . a ; "4(6) Definitions"@en; ; "bbbebb8b12cb25ece3747bbcf02e11b590cf34be479b4fe2a481d88860e7db34"; ; "Definition of filing system"; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.33"; . a ; ; ; ; . a ; "4(7) Definitions"@en; ; "39e795a1b25bfe78dfd2a5c744633fb5c4e783571dbe5c8355d42d7c4936c223"; ; "Definition of controller"; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.33"; . a ; ; ; ; . a ; "4(8) Definitions"@en; ; "6fa8e6119ed49327b944a165ae6710234dbf2a2b11b75d6beabbc4951a5ca4c4"; ; "Defines processor as a natural or legal person, public authority, agency or other body that processes personal data on behalf of the controller."; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.33"; . a ; ; ; ; "borne by: State"; ; . . a ; ; "definition"; "Defines processor with clear boundaries."; "modalities::logic::deontic"; 1.0000; . . a ; ; "class hierarchy"; "Establishes a clear class hierarchy for processors."; "modalities::dl"; 1.0000; . a ; "4(9) Definitions"@en; ; "f8fea9e78996c6f157ce7a74c9cfdaaf0acce4d72585c0baddd540c5f3637437"; ; "Defines recipient for data disclosure"; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.33"; . a ; ; ; ; "borne by: State"; ; . a ; "4(10) Definitions"@en; ; "b22d878d4cb14c26e10511b499c612bd67b5bcbae6603b4fc71e01c6e652a69e"; ; "Definition of third party"; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.33"; . a ; ; ; ; ; . . a ; ; "type"; "Class hierarchy"; "Natural or legal person, public authority, agency or body"; "third party"; "modalities::dl"; 1.0000; . . a ; ; "between"; "Temporal relation"; "Data subject, controller, processor"; "third party"; "modalities::interval_reasoning"; 1.0000; . a ; "4(11) Definitions"@en; ; "9d56f64c2955ade505f0d2747b405cfafbe2718beff22d60f79ef8775f7a153b"; ; "Definition of consent for data subject"; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.33"; . a ; ; ; ; "borne by: NaturalPerson"; ; . . a ; ; "has"; "Definition of a key term"; "modalities::logic::deontic"; 1.0000; . . a ; ; "subClassOf"; "Classification as a definition"; "modalities::dl"; 1.0000; . a ; "4(12) Definitions"@en; ; "b7678e65a4c87d1e4fea02adf378d3f57bd6e6c8d0d61e8fcdbb4177e38933be"; ; "Definition of personal data breach"; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.33"; . a ; ; ; ; ; . . a ; ; "="; "Classifies personal data breach"; "Personal data breach means..."; "...a breach of security leading to..."; "modalities::dl"; 1.0000; . . a ; ; "implies"; "Implication from definition"; "(12) ‘personal data breach’ means..."; "...leading to the accidental or unlawful destruction..."; "modalities::logic::deontic"; 1.0000; . a ; "4(13) Definitions"@en; ; "84d7c9a2092b13c4d7bbbb675cabfbd62887f450e113bcaaecadc58d010955d8"; ; "Defines 'genetic data'"; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.33"; . a ; ; ; ; ; . . a ; ; "="; "Classifies genetic data"; "modalities::dl"; 1.0000; . . a ; ; "has definition"; "Defines term"; "modalities::logic::deontic"; 1.0000; . a ; "4(14) Definitions"@en; ; "357351552aaa48aca6bc54bbb19e03e54643473ea6f4a41ed92afd9def60404e"; ; "Defines biometric data"; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.33"; . a ; ; ; ; ; . a ; "4(15) Definitions"@en; ; "3d96baf3d89d6b70495c4ef19d84a3cc88507f5a1f141fe85da849fab4b9ddee"; ; "Defines 'data concerning health'"; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.33"; . a ; ; ; ; "borne by: State"; ; . . a ; ; "defines"; "Defines a term"; "modalities::logic::deontic"; 1.0000; . . a ; ; "classifies"; "Classifies data into categories"; "modalities::dl"; 1.0000; . a ; "4(16) Definitions"@en; ; "f6940f69bce5679c0ab99cb5add3ea5483b7d3bdba40f09757a439a044762087"; ; "Definition of main establishment for controllers and processors"; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.33"; . a ; ; ; ; . . a ; ; "type"; "Class hierarchy"; "(a) as regards a controller with establishments in more than one Member State, the place of its central administration in the Union..."; "the place of its central adminis­tration in the Union"; "modalities::dl"; 0.5000; . . a ; ; "type"; "Class hierarchy"; "(b) as regards a processor with establishments in more than one Member State, the place of its central administration in the Union..."; "the place of its central adminis­tration in the Union"; "modalities::dl"; 0.5000; . . a ; ; "between"; "Temporal relation between decisions and implementation"; "the latter establishment has the power to have such decisions implemented..."; "the establishment having taken such decisions is to be considered to be the main establishment"; "modalities::interval_reasoning"; 0.5000; . . a ; ; "until"; "Conditional commencement"; "the decisions on the purposes and means of the processing of personal data are taken in another establishment..."; "the establishment having taken such decisions is to be considered to be the main establishment"; "modalities::temporal_ltl"; 0.5000; . . a ; ; "must"; "Obligation for implementation"; "the latter establishment has the power to have such decisions implemented..."; "the establishment having taken such decisions is to be considered to be the main establishment"; "modalities::logic::deontic"; 0.5000; . . a ; ; "must"; "Obligation for implementation"; "the decisions on the purposes and means of the processing of personal data are taken in another establishment..."; "the establishment having taken such decisions is to be considered to be the main establishment"; "modalities::logic::deontic"; 0.5000; . a ; "4(17) Definitions"@en; ; "397ecee046138ffd4ce1360c2216ab7f9e374bcf2f0aece28f6ea84309a78953"; ; "Defines 'representative' for the purposes of the regulation."; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.33"; . a ; ; ; ; "borne by: State"; ; . . a ; ; "is defined as"; "Defines a term with a specific meaning."; "modalities::logic::deontic"; 1.0000; . . a ; ; "has definition"; "Provides a definition for the term."; "modalities::dl"; 1.0000; . a ; "4(18) Definitions"@en; ; "41b049a958236dde40c583a9a9eaa59b2b21caa736a71b771111c12801914b0f"; ; "Definition of enterprise"; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.33"; . a ; ; ; ; . a ; "4(19) Definitions"@en; ; "3190de80105fc961861a7c401bd741ded5546e09544fa73465131ba47d102a71"; ; "Definition of group of undertakings"; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.33"; . a ; ; ; ; . . a ; ; "definition"; "Defines a term"; "modalities::dl"; 1.0000; . a ; "4(20) Definitions"@en; ; "8e30671633c06b4b6b00eedd10bc72abf78f2db45efc4771f54e9eb387b1246f"; ; "Definition of binding corporate rules"; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.33"; . a ; ; ; ; . . a ; ; "="; "Classifies entities"; "Personal data protection policies are adhered to by a controller or processor"; "Binding corporate rules"; "modalities::dl"; 1.0000; . . a ; ; "="; "Defines scope of binding corporate rules"; "Transfers or a set of transfers of personal data to a controller or processor in one or more third countries within a group of undertakings"; "Within a group of undertakings"; "modalities::dl"; 1.0000; . . a ; ; "="; "Defines scope of binding corporate rules"; "Transfers or a set of transfers of personal data to a controller or processor in one or more third countries within a group of enterprises engaged in a joint economic activity"; "Within a group of enterprises engaged in a joint economic activity"; "modalities::dl"; 1.0000; . . a ; ; "="; "Defines scope of binding corporate rules"; "Personal data protection policies which are adhered to by a controller or processor established on the territory of a Member State"; "Established on the territory of a Member State"; "modalities::dl"; 1.0000; . . a ; ; "="; "Defines scope of binding corporate rules"; "Transfers or a set of transfers of personal data to a controller or processor in one or more third countries"; "In one or more third countries"; "modalities::dl"; 1.0000; . . a ; ; "="; "Defines scope of binding corporate rules"; "Within a group of undertakings, or group of enterprises engaged in a joint economic activity"; "Or"; "modalities::dl"; 1.0000; . a ; "4(21) Definitions"@en; ; "8d3d326da5c719d200ae2608defd7f55efc20ff7c022e8bef5c47870a097d970"; ; "Definition of supervisory authority"; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.33"; . a ; ; ; ; . a ; "4(22) Definitions"@en; ; "7cea1ad349cf0b1a08f087958d4d4a24856276d296df5f5cf7d4e9acd8f61492"; ; "Defines supervisory authority concerned"; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.33"; . a ; ; ; ; "borne by: State"; ; . . a ; ; "Obligate"; "Defines supervisory authority concerned"; "modalities::logic::deontic"; 1.0000; . . a ; ; "="; "Identifies a specific entity"; "(22) ‘supervisory authority concerned’ means..."; "...a supervisory authority which is concerned by the processing of personal data"; "modalities::dl"; 1.0000; . . a ; ; "="; "Defines a class hierarchy"; "The controller or processor is established on the territory of the Member State..."; "...of that supervisory authority;"; "modalities::dl"; 1.0000; . a ; "4(23) Definitions"@en; ; "94ebdcadfc6571771a5c40e8309efc75f99d34137cbae4dc01d8968f1abba700"; ; "Definition of cross-border processing"; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.33"; . a ; ; ; ; . a ; "4(24) Definitions"@en; ; "9d016beb1e19f3a43ec8de06fe37971bd82cb2e754fe98d9b670f72f861603db"; ; "Definition of relevant and reasoned objection"; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.33"; . a ; ; ; ; "borne by: State"; ; . . a ; ; "definition"; "Defines a term with a clear meaning"; "modalities::logic::deontic"; 1.0000; . . a ; ; "class hierarchy"; "Applies to explicit class hierarchies"; "modalities::dl"; 1.0000; . a ; "4(25) Definitions"@en; ; "a441033542c0aa5003821ee07178f50b219525262162f5bc9257942dbb5020eb"; ; "Definition of information society service"; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.33"; . a ; ; ; ; . . a ; ; "definition"; "Defines a term"; "(25) ‘information society service’ means..."; "...a service as defined in point (b)..."; "modalities::dl"; 1.0000; . a ; "4(26) Definitions"@en; ; "dbb7f0fb244d32534d53964c78ede6054cb1dfa9c3b7c92b2972dfba4d14ff0c"; ; "Definition of international organisation"; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.33"; . a ; ; ; ; . . a ; ; "="; "Classifies as definition"; "International organisation"; "modalities::dl"; 1.0000; . a ; "5 Principles relating to processing of personal data"@en; ; "2368c0438173cf224ee575720d2f10f1840b17be15d232479a8bf669cde67388"; "Processing of personal data must be lawful, fair, transparent, and secure."; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.35"; . a ; ; ; ; "borne by: State"; ; . . a ; ; "MUST"; "Must provide processing of personal data in a lawful manner."; "modalities::logic::deontic"; 1.0000; . a ; "6 Lawfulness of processing"@en; ; "75cdee57991c1a48e4cb8cef50fb57bcff2da5eb0bad42078a538967f18b015e"; "Processing of personal data is lawful only if one of the specified conditions applies."; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.36"; . a ; ; ; ; "borne by: State"; ; . . a ; ; "Obligate"; "Processing of personal data is lawful only if one of the specified conditions applies."; "modalities::logic::deontic"; 1.0000; . . a ; ; ">="; "Temporal intervals for processing"; "Processing starts at"; "Processing ends at"; "modalities::interval_reasoning"; 1.0000; . a ; "7 Conditions for consent"@en; ; "6313df2e56586acb4d83952c907878498691e230654f7244b59e6b03bfdc76ac"; "Controller must demonstrate data subject consent for processing personal data."; "Data subject's consent"; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.37"; . a ; ; ; ; "borne by: State"; ; . . a ; ; "MUST"; "Controller must demonstrate data subject consent"; "modalities::logic::deontic"; 1.0000; . a ; "8 Conditions applicable to child's consent in relation to information society services"@en; ; "1a4de05cebbd612407947dd1fa7d20a5347abe51d0d0d91f38baecc45e6bd120"; "Processing of child's personal data requires consent from parent or guardian if child is under 16."; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.37"; . a ; ; ; ; "borne by: State"; ; . . a ; ; "Necessity"; "Processing requires consent from parent or guardian."; "Child under 16 years old."; "Consent required."; "modalities::logic::deontic"; 1.0000; . a ; "9 Processing of special categories of personal data"@en; ; "10e837ac17a05652da5f3d17fbf514a81bd0abb8a526458932dda7182381dd8d"; "Processing of special categories of personal data is prohibited."; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.38"; . a ; ; ; ; ; . . a ; ; "Prohibit"; "Prohibits processing of special categories of personal data."; "modalities::logic::deontic"; 1.0000; . a ; "10 Processing of personal data relating to criminal convictions and offences"@en; ; "7e18c1943337e944ce7b2a689b1440509015329b096c090cd75f657e7a7d7ba8"; "Processing of personal data must be carried out under official authority or with Union/Member State law authorisation."; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.39"; . a ; ; ; ; "borne by: State"; ; . . a ; ; "shall"; "Implies obligation."; "modalities::logic::deontic"; 1.0000; . a ; "11 Processing which does not require identification"@en; ; "d1f4f7f77f2d9b301e187977f4113bc0939c98b386de75e549e3a181f3a3fda9"; "Controller does not need to identify data subject for processing purposes."; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.39"; . a ; ; ; ; "borne by: State"; ; . . a ; ; "!"; "No obligation to identify data subject"; "modalities::logic::deontic"; 1.0000; . a ; "12 Transparent information, communication and modalities for the exercise of the rights of the data"@en; ; "638dbe9d52420a36ccd28726b0a64e3b0ec23296c1b96928c870394b8ae7a5cc"; "Controller must provide information and communication about data processing to data subjects."; "Yes"; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.39"; . a ; ; ; ; ; . . a ; ; "MUST"; "Controller must provide information and communication."; "modalities::logic::deontic"; 1.0000; . . a ; ; "hasPart"; "Information provided must be concise, transparent, intelligible, and easily accessible."; "modalities::dl"; 1.0000; . a ; "13 Information to be provided where personal data are collected from the data subject"@en; ; "41413a2df73773f0e3126311903bd666becf36551632efbaa6fb51c37aead65f"; "Controller must provide personal data subject with certain information when collecting their data."; "true"; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.40"; . a ; ; ; ; "borne by: State"; ; . . a ; ; "MUST"; "Must provide information to the data subject"; "modalities::logic::deontic"; 1.0000; . . a ; ; "hasPart"; "Information includes identity and contact details of controller"; "modalities::dl"; 1.0000; . a ; "14 Information to be provided where personal data have not been obtained from the data subject"@en; ; "f5b335f8fb2481bd2d8012d1bb8400793a0e9e4d6ef330299c4498891b83f63c"; "Controller must provide personal data subject with certain information."; "Yes"; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.41"; . a ; ; ; ; "borne by: State"; ; . . a ; ; "MUST"; "Must provide information to the data subject."; "modalities::logic::deontic"; 1.0000; . . a ; ; "hasPart"; "Information includes identity and contact details of controller."; "modalities::dl"; 1.0000; . a ; "15 Right of access by the data subject"@en; ; "9bf0bda9ddeec0d7b4554da612e8ce22d7cf38ac1f157e2d7c9bc7945c86858a"; "Data subject has right to access personal data"; "controller"; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.43"; . a ; ; ; ; "borne by: NaturalPerson"; ; . . a ; ; "Obligation"; "Right of access by the data subject"; "modalities::logic::deontic"; 1.0000; . . a ; ; "ClassInclusion"; "Explicit class/type/subclass hierarchy"; "modalities::dl"; 1.0000; . a ; "16 Right to rectification"@en; ; "32e62af89f3d9d351198456b04fc2b624f1beb0217b462e9ae15c42d6e390e21"; "Data subject has right to rectification of inaccurate personal data."; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.43"; . a ; ; ; ; "held by: State"; ; . . a ; ; "hasRight"; "Data subject has right to rectification."; "modalities::logic::deontic"; 1.0000; . . a ; ; "subClassOf"; "Rectification is a subclass of data correction."; "modalities::dl"; 1.0000; . a ; "17 Right to erasure (‘right to be forgotten’)"@en; ; "786918983d661c6aba1e63c2bb40ebb0436cf9ab90c8147b3a7afc5d686daa2f"; "Data subject has right to erasure of personal data"; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.43"; . a ; ; ; ; "borne by: NaturalPerson"; ; . . a ; ; "Obligation"; "Controller has obligation to erase personal data"; "modalities::logic::deontic"; 1.0000; . a ; "18 Right to restriction of processing"@en; ; "8c3eb39f9c0b0b626d4024a9405bb26ac44f81903cf6d8b224247d03539d4060"; "Data subject has right to restrict processing under certain conditions."; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.44"; . a ; ; ; ; "held by: State"; ; . . a ; ; "hasRight"; "Data subject has right to restrict processing."; "modalities::logic::deontic"; 1.0000; . a ; "19 Notification obligation regarding rectification or erasure of personal data or restriction of"@en; ; "bb3f140cbba51a17ae16ad8c9538a3d4d1011a903da4a6f38940d0839aa724e9"; "Controller must notify recipients of personal data rectification or erasure."; "Yes"; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.45"; . a ; ; ; ; "borne by: State"; ; . . a ; ; "MUST"; "Controller must notify recipients."; "modalities::logic::deontic"; 1.0000; . a ; "20 Right to data portability"@en; ; "9efa3e6c71afa21f221221f4167b55f734c9d9b1e7da5ba596e2df0beea2d6fd"; "Data subject has right to receive personal data in a structured format and transmit it to another controller."; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.45"; . a ; ; ; ; "borne by: NaturalPerson"; ; . . a ; ; "Obligation"; "Data subject has a right."; "modalities::logic::deontic"; 1.0000; . . a ; ; "ClassInclusion"; "Right to data portability is defined for natural persons."; "modalities::dl"; 1.0000; . a ; "21 Right to object"@en; ; "1ff9accde375c120961e81a73d3b33e77c4d486408425cac209c64a48671eeb1"; "Data subject has right to object to processing of personal data for certain purposes."; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.45"; . a ; ; ; ; "borne by: NaturalPerson"; ; . . a ; ; "Obligation"; "Data subject has obligation to object."; "modalities::logic::deontic"; 1.0000; . . a ; ; "ClassInclusion"; "Article 21 classifies as right."; "modalities::dl"; 1.0000; . a ; "22 Automated individual decision-making, including profiling"@en; ; "d8f9df478b0dd5fd4520b6ead2416e5ec9bddea742f6cea0a791fe6d0d178036"; "Right not to be subject to decision based solely on automated processing, including profiling."; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.46"; . a ; ; ; ; ; . . a ; ; "obligation"; "Right to be free from automated decision-making."; "modalities::logic::deontic"; 1.0000; . a ; "23 Restrictions"@en; ; "89a0536dd156eb685ad7c1a0cf516ef4b0617f0bedb054ca29f49d84f5652d6e"; "Restrictions on data processing obligations and rights"; "specific provisions regarding purposes, categories of processing, scope of restrictions, safeguards, controller information, storage periods, and risks to rights and freedoms"; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.46"; . a ; ; ; ; ; . . a ; ; "Prohibition"; "Restricts data processing obligations and rights"; "modalities::logic::deontic"; 1.0000; . a ; "24 Responsibility of the controller"@en; ; "8d9b56035ce56d7bbb36dcb23589b87f6adfbad1a52a6c3a93ce2184bb5d78e1"; "Controller must implement technical and organisational measures to ensure data protection."; "Demonstration of compliance with obligations"; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.47"; . a ; ; ; ; "borne by: State"; ; . . a ; ; "MUST"; "Controller must implement measures"; "modalities::logic::deontic"; 1.0000; . a ; "25 Data protection by design and by default"@en; ; "69e1cd0012aec7fe3c8bb927129ddcefb17a4c72870c85675546fac6c4f1b5c9"; "Implement technical and organisational measures for data protection"; "Data minimisation, pseudonymisation, necessary safeguards"; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.48"; . a ; ; ; ; "borne by: State"; ; . . a ; ; "MUST"; "Obligation to implement measures"; "modalities::logic::deontic"; 1.0000; . . a ; ; "CLASSIFICATION"; "Classification of processing purposes"; "Nature, scope, context and purposes of processing"; "modalities::dl"; 1.0000; . a ; "26 Joint controllers"@en; ; "a289f4ab1dfe245d093e33cfd2b21bc89b117c2f1b62932db91b7e4d2e684599"; "Joint controllers must determine their respective responsibilities for compliance with the obligations under this Regulation."; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.48"; . a ; ; ; ; ; . . a ; ; "shall"; "Implies an obligation."; "modalities::logic::deontic"; 1.0000; . . a ; ; "reflexive"; "Applies to the controllers themselves."; "modalities::dl"; 1.0000; . a ; "27 Representatives of controllers or processors not established in the Union"@en; ; "5f5ad39887c4f328452c000ee9935ff34445c7f0405f73cd7f859451b1925d08"; "Designation of representative for controllers and processors not established in the Union"; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.48"; . a ; ; ; ; ; . . a ; ; "MUST"; "Obligation to designate a representative"; "modalities::logic::deontic"; 1.0000; . a ; "28 Processor"@en; ; "bb5503096f70f582b1136ff8132fca4e55f204f1ceb83120cafed239c469234c"; "Processor must implement technical and organisational measures to ensure data protection."; "guarantees, documentation, and information for audits"; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.49"; . a ; ; ; ; ; . . a ; ; "MUST"; "Processor must implement measures to ensure data protection."; "modalities::logic::deontic"; 1.0000; . . a ; ; "SUBCLASS_OF"; "Processor is a subprocessor of the controller."; "modalities::dl"; 1.0000; . a ; "29 Processing under the authority of the controller or processor"@en; ; "927b10f7d0ead1cfc24cd09cac7902576b5895efe49f2318e6083ac7ef99dc10"; "Processor must not process personal data except on instructions from the controller."; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.50"; . a ; ; ; ; ; . . a ; ; "Must Not"; "Processor must not process personal data."; "modalities::logic::deontic"; 1.0000; . a ; "30 Records of processing activities"@en; ; "3d7f32bb5adf85e3d1b63494a90abe531bcd6bff21dbcc75f6c653e0dec70c8b"; "Controller and processor must maintain records of processing activities."; "Records of processing activities"; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.50"; . a ; ; ; ; "borne by: State"; ; . . a ; ; "MUST"; "Must provide records"; "modalities::logic::deontic"; 1.0000; . . a ; ; "CLASSIFICATION"; "Classification of data subjects and categories"; "modalities::dl"; 1.0000; . a ; "31 Cooperation with the supervisory authority"@en; ; "e84e14de5cfcc5931e080be2cc067ffb0e4b1ef116889681cdbaf8a6181d53b4"; "Cooperation with supervisory authority upon request."; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.51"; . a ; ; ; ; ; . . a ; ; "shall"; "Implies obligation."; "modalities::logic::deontic"; 1.0000; . a ; "32 Security of processing"@en; ; "9c0629a42369e4f1782884dbd6d1f5fb0dbbceb2834a20dc9618f66fa6bf102c"; "Implement appropriate technical and organisational measures to ensure a level of security."; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.51"; . a ; ; ; ; ; . . a ; ; "MUST"; "Must implement appropriate technical and organisational measures."; "modalities::logic::deontic"; 1.0000; . . a ; ; "SHOULD"; "Should implement appropriate technical and organisational measures."; "modalities::logic::deontic"; 1.0000; . a ; "33 Notification of a personal data breach to the supervisory authority"@en; ; "288bebd0ff97972d8eec2cc758df97acc2e44e4516751e266b2b04f4ad7907a9"; "Controller must notify supervisory authority of personal data breach within 72 hours."; "Notification of personal data breach, including measures to address it."; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.52"; . a ; ; ; ; "borne by: State"; ; . . a ; ; "MUST"; "Controller must notify supervisory authority."; "modalities::logic::deontic"; 1.0000; . a ; "34 Communication of a personal data breach to the data subject"@en; ; "c52e76902ba9d3556c3b4c35a27b74d6f20b1f1479810a481b90b26dc0412cbf"; "Controller must communicate personal data breach to data subject without undue delay if risk is high."; "Personal data breach information and measures"; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.52"; . a ; ; ; ; "borne by: State"; ; . . a ; ; "MUST"; "Controller must communicate personal data breach"; "modalities::logic::deontic"; 1.0000; . a ; "35 Data protection impact assessment"@en; ; "28b8c641d6296780b8d3b3175d8bf46239754c9dcb2252fbead09cdd79657df7"; "Controller must carry out data protection impact assessment prior to processing operations likely to result in high risk to rights and freedoms of natural persons."; "Data protection impact assessment"; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.53"; . a ; ; ; ; "borne by: State"; ; . . a ; ; "MUST"; "Controller must carry out data protection impact assessment."; "modalities::logic::deontic"; 1.0000; . . a ; ; "IS_A"; "Data protection impact assessment is a specific type of processing operation."; "modalities::dl"; 1.0000; . a ; "36 Prior consultation"@en; ; "59ae36d2d33509d2e0b303f04b5407732cebb6e8baa9e2ebfdc50a11866f057f"; "Controller must consult supervisory authority prior to processing where a data protection impact assessment indicates high risk."; "Information about the intended processing, measures and safeguards, contact details of data protection officer, and data protection impact assessment."; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.54"; . a ; ; ; ; "borne by: State"; ; . . a ; ; "MUST"; "Controller must consult supervisory authority."; "modalities::logic::deontic"; 1.0000; . . a ; ; "IS-A"; "Information about the intended processing is required."; "modalities::dl"; 1.0000; . . a ; ; "SHALL"; "Controller shall provide information to supervisory authority."; "modalities::logic::deontic"; 1.0000; . . a ; ; ">="; "Timeframe for consultation is up to eight weeks."; "modalities::interval_reasoning"; 1.0000; . . a ; ; "MAY"; "Supervisory authority may use its powers."; "modalities::logic::deontic"; 1.0000; . a ; "37 Designation of the data protection officer"@en; ; "d1b16c521f6e2748ff2b96a7bd4dab8a5ddbd2a200dcd431dcc9d1b827f7590c"; "Designation of data protection officer"; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.55"; . a ; ; ; ; ; . . a ; ; "MUST"; "Must designate a data protection officer"; "modalities::logic::deontic"; 1.0000; . a ; "38 Position of the data protection officer"@en; ; "6aec3f0acc521227cc42b47844fc79db0b1a16b84dcf238be897eaab50ca88b1"; "Controller and processor must ensure data protection officer is involved in protecting personal data."; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.55"; . a ; ; ; ; "borne by: State"; ; . . a ; ; "MUST"; "Must provide"; "modalities::logic::deontic"; 1.0000; . a ; "39 Tasks of the data protection officer"@en; ; "6896388de27cd05f1ce72a954241017d5b2391c9307dadbba857e57a54a66483"; "Data protection officer's tasks and responsibilities"; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.56"; . a ; ; ; ; "borne by: State"; ; . . a ; ; "hasTask"; "Has task"; "modalities::logic::deontic"; 1.0000; . a ; "40 Codes of conduct"@en; ; "c51ecd61ca8fdc5a7cd852257ba6b1f7901ea6e3f8da076aea31ca8a9d1b1b32"; "Codes of conduct for proper application of Regulation"; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.56"; . a ; ; ; ; ; . . a ; ; "hasClass"; "Classification of codes of conduct"; "modalities::dl"; 1.0000; . . a ; ; "obligation"; "Obligation to prepare and approve codes of conduct"; "modalities::logic::deontic"; 1.0000; . a ; "41 Monitoring of approved codes of conduct"@en; ; "f1406ec6a4814474f4ae31f25a14114d5bb6fb4e73537f31f2291601373cf3d0"; "A body with expertise and independence can be accredited to monitor compliance with a code of conduct."; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.58"; . a ; ; ; ; "borne by: State"; ; . . a ; ; ">"; "Establishes procedures for assessing eligibility and monitoring compliance."; "modalities::logic::deontic"; 1.0000; . a ; "42 Certification"@en; ; "d647e215833fad1382247cd791d1f4594b1fe4db71602fcb9eb02fd3da95d8dc"; "Member States, supervisory authorities, Board, and Commission shall encourage establishment of data protection certification mechanisms."; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.58"; . a ; ; ; ; "borne by: State"; ; . . a ; ; "="; "Establishment of certification mechanisms is obligatory."; "modalities::dl"; 1.0000; . . a ; ; ">"; "Certification mechanisms must be established at Union level."; "modalities::logic::deontic"; 1.0000; . a ; "43 Certification bodies"@en; ; "2c7ab7acf70c7ae970736b393c496bfa13de0f6dcb828cb0d0d22776824c17d1"; "Certification bodies must be accredited and meet specific requirements."; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.59"; . a ; ; ; ; ; . . a ; ; "hasClass"; "Classification of certification bodies"; "modalities::dl"; 1.0000; . . a ; ; "obligation"; "Certification body accreditation requirements"; "modalities::logic::deontic"; 1.0000; . a ; "44 General principle for transfers"@en; ; "ac64d56a13d1798d0206b16b6ca9c98da1b06870201c02603a623b4472d99064"; "Transfer of personal data must comply with conditions in Chapter 4."; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.60"; . a ; ; ; ; ; . . a ; ; "MUST"; "Must comply with conditions"; "modalities::logic::deontic"; 1.0000; . a ; "45 Transfers on the basis of an adequacy decision"@en; ; "c4186872500b177ae8439b809c3a657cd4dd4ee5745315dcea1231153496cf15"; "Commission may decide that a third country or international organisation ensures an adequate level of protection."; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.61"; . a ; ; ; ; . . a ; ; "May"; "Commission may decide that a third country or international organisation ensures an adequate level of protection."; "modalities::logic::deontic"; 1.0000; . . a ; ; "Classifies"; "Article classifies third countries and international organisations based on their data protection levels."; "modalities::dl"; 1.0000; . a ; "46 Transfers subject to appropriate safeguards"@en; ; "a9cf76111139c6915e642276859bdf5f07544c2a4cc3bd2e5ed3c5bdd87865ef"; "Controller or processor must provide appropriate safeguards when transferring personal data to a third country."; "Yes"; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.62"; . a ; ; ; ; "borne by: State"; ; . . a ; ; "MUST"; "Controller or processor must provide appropriate safeguards."; "modalities::logic::deontic"; 1.0000; . a ; "47 Binding corporate rules"@en; ; "5eec647af81113cf76373aad11f4c79e9ffe82477e6461b8133d80f2917ab30a"; "Binding corporate rules must be approved by the competent supervisory authority and meet certain requirements."; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.62"; . a ; ; ; ; ; . . a ; ; "Obligation"; "Binding corporate rules must be approved by the competent supervisory authority."; "modalities::logic::deontic"; 1.0000; . . a ; ; "Classify"; "The binding corporate rules must specify certain information about the group of undertakings or enterprises."; "modalities::dl"; 1.0000; . . a ; ; "Permission"; "Data subjects have enforceable rights regarding the processing of their personal data."; "modalities::logic::deontic"; 1.0000; . . a ; ; "Implication"; "The binding corporate rules must be legally binding and apply to all members of the group."; "modalities::linear"; 1.0000; . a ; "48 Transfers or disclosures not authorised by Union law"@en; ; "11790fa5519856ff131a8b3e761bddd54c6e883dd6083bcf1709b30dfe4cba11"; "No transfer or disclosure of personal data without international agreement."; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.64"; . a ; ; ; ; ; . . a ; ; "Prohibit"; "Prohibits transfer or disclosure of personal data."; "modalities::logic::deontic"; 1.0000; . a ; "49 Derogations for specific situations"@en; ; "3f466afaf43916da2ac700ce6e069b2283648ce22ad2dfaa537155965b887e1d"; "Transfer of personal data to a third country or international organisation requires explicit consent, contract necessity, public interest, legal claims, vital interests, or consultation."; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.64"; . a ; ; ; ; "borne by: State"; ; . . a ; ; "!"; "Negation of transfer without consent or necessity"; "modalities::logic::deontic"; 1.0000; . a ; "50 International cooperation for the protection of personal data"@en; ; "80ef0b2a8159d3a6a15890d6d074ad7a364e7178a28d396e9954b420c312704f"; "Commission and supervisory authorities shall take appropriate steps to develop international cooperation mechanisms."; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.65"; . a ; ; ; ; "borne by: State"; ; . . a ; ; "shall"; "Implies obligation."; "modalities::logic::deontic"; 1.0000; . a ; "51 Supervisory authority"@en; ; "ed4807769e1b9c35ac2ac6c53eea2024fd7e3489ab49e3a826a4b04915da431f"; "Each Member State shall provide for one or more independent public authorities to be responsible for monitoring the application of this Regulation."; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.65"; . a ; ; ; ; "borne by: State"; ; . . a ; ; "MUST"; "Member States must provide for one or more independent public authorities."; "modalities::logic::deontic"; 1.0000; . a ; "52 Independence"@en; ; "4c754792d48fbe7918e2a60e6326ba9a36bd064b708cae80f80eef4b8f010c58"; "Member States must ensure supervisory authorities have necessary resources and staff."; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.66"; . a ; ; ; ; "borne by: State"; ; . . a ; ; "MUST"; "Member States must ensure supervisory authorities have necessary resources and staff."; "Each Member State shall..."; "...ensuring each supervisory authority is provided with the human, technical and financial resources..."; "modalities::logic::deontic"; 1.0000; . . a ; ; "MUST"; "Member States must choose and have staff for supervisory authorities."; "Each Member State shall ensure that each supervisory authority chooses..."; "...which shall be subject to the exclusive direction of the member or members of the supervisory authority concerned."; "modalities::logic::deontic"; 1.0000; . . a ; ; "MUST"; "Supervisory authorities must not engage in incompatible occupations."; "Member or members of each supervisory authority shall refrain from any action..."; "...during their term of office, engage in any incompatible occupation..."; "modalities::logic::deontic"; 1.0000; . . a ; ; "MUST"; "Supervisory authorities must remain free from external influence."; "Member or members of each supervisory authority shall, in the performance of their tasks and exercise of their powers..."; "...neither seek nor take instructions from anybody."; "modalities::logic::deontic"; 1.0000; . a ; "53 General conditions for the members of the supervisory authority"@en; ; "ea36152eb1a40f46cd4c8c9a6ac5105aa9cbad12cc5516c5a309cfdee48c7123"; "Member States shall appoint supervisory authority members through a transparent procedure."; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.66"; . a ; ; ; ; "borne by: State"; ; . . a ; ; "shall"; "Implies an obligation."; "modalities::logic::deontic"; 1.0000; . . a ; ; "has"; "Describes the appointment process."; "modalities::dl"; 1.0000; . a ; "54 Rules on the establishment of the supervisory authority"@en; ; "1fac0fbc7c3bd520a774b29a11d8363440e4b498832cd28e4f42fa05f8f0ca6a"; "Member States must provide for the establishment of supervisory authorities."; "True"; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.66"; . a ; ; ; ; ; . . a ; ; "MUST"; "Member States must provide for the establishment of supervisory authorities."; "modalities::logic::deontic"; 1.0000; . . a ; ; "CLASSIFICATION"; "Establishment of supervisory authorities is a classification of Member State laws."; "modalities::dl"; 1.0000; . a ; "55 Competence"@en; ; "45c6f2fa64930f29019e28aee47c65b2112a6e599b0d6fce104604648407227b"; "Supervisory authorities are competent for tasks and powers within their own Member State."; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.67"; . a ; ; ; ; "borne by: State"; ; . . a ; ; "is"; "Authority competence"; "Supervisory authority"; "Competent"; "modalities::logic::deontic"; 1.0000; . a ; "56 Competence of the lead supervisory authority"@en; ; "7fbc72229a990942f76b0c741d15a31cdde9e6770bf48f9815909fefe2ba8657"; "Lead supervisory authority competence for cross-border processing"; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.67"; . a ; ; ; ; "borne by: State"; ; . . a ; ; "hasCompetence"; "Lead supervisory authority has competence to act as lead supervisory authority"; "modalities::logic::deontic"; 1.0000; . a ; "57 Tasks"@en; ; "9cf02a9b169ec44c4d75ac48c8ab91a5ef05b73819258916ced61a13e7b732f3"; "Supervisory authorities have various tasks related to data protection, including monitoring and enforcing the regulation, promoting public awareness, and handling complaints."; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.68"; . a ; ; ; ; "borne by: State"; ; . . a ; ; "hasTask"; "Supervisory authorities have tasks related to data protection."; "modalities::logic::deontic"; 1.0000; . . a ; ; "instanceOf"; "Tasks are instances of obligations."; "modalities::dl"; 1.0000; . a ; "58 Powers"@en; ; "019a91a6dbadf242f280546b375a169fe50b19715b95f7b308d3ae3f060c6e35"; "Supervisory authorities have various powers and corrective powers to enforce data protection regulations."; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.69"; . a ; ; ; ; "borne by: State"; ; . . a ; ; "hasPower"; "Supervisory authorities have various powers."; "modalities::logic::deontic"; 1.0000; . . a ; ; "isSubclassOf"; "Powers are a subclass of corrective powers."; "modalities::dl"; 1.0000; . . a ; ; "hasCorrectivePower"; "Supervisory authorities have various corrective powers."; "modalities::logic::deontic"; 1.0000; . . a ; ; "hasAuthority"; "Supervisory authorities have various authorisation and advisory powers."; "modalities::logic::deontic"; 1.0000; . a ; "59 Activity reports"@en; ; "1a31b3fecc36cdd5b5a365f962264d416674a032629f39997fddf69734a6f71d"; "Annual report on activities required for supervisory authorities"; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.70"; . a ; ; ; ; "borne by: State"; ; . . a ; ; "MUST"; "Must provide annual report"; "modalities::logic::deontic"; 1.0000; . a ; "60 Cooperation between the lead supervisory authority and the other supervisory authorities"@en; ; "1082065a552f3d25e963582094b0690fea444d0dce7b31870b156fae94ba7f07"; "Cooperation between lead and other supervisory authorities"; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.71"; . a ; ; ; ; ; . . a ; ; "="; "Class hierarchy"; "modalities::dl"; 1.0000; . . a ; ; ">"; "Exchange of information"; "modalities::logic::deontic"; 1.0000; . a ; "61 Mutual assistance"@en; ; "5430338af386eea4ffc76ee2c96fce0fa8674f51b2346bcb29086285071ad039"; "Supervisory authorities must provide each other with relevant information and mutual assistance."; "Yes"; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.72"; . a ; ; ; ; "borne by: State"; ; . . a ; ; "MUST"; "Must provide"; "modalities::logic::deontic"; 1.0000; . . a ; ; "hasPart"; "Has part"; "modalities::dl"; 1.0000; . a ; "62 Joint operations of supervisory authorities"@en; ; "29278bc848286901d120f76ac6088ae2f13e5f38c60f2807c45ed70ad3e0492b"; "Supervisory authorities must conduct joint operations with other Member States' supervisory authorities."; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.72"; . a ; ; ; ; "borne by: State"; ; . . a ; ; "MUST"; "Supervisory authorities must conduct joint operations."; "modalities::logic::deontic"; 1.0000; . a ; "63 Consistency mechanism"@en; ; "eae167e61ed56f8225bb8e4a4d8a5d0e3be510baab1312737884966eadd5ef3d"; "Supervisory authorities must cooperate with each other and the Commission through the consistency mechanism."; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.73"; . a ; ; ; ; ; . . a ; ; "shall"; "Expresses a mandatory obligation."; "modalities::logic::deontic"; 1.0000; . a ; "64 Opinion of the Board"@en; ; "411a5f6e69822f46eb455e8b3e3bf25b4607d569e9e3cdedc802047f71a52566"; "Supervisory authorities and the Commission shall issue an opinion to the Board on certain matters."; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.73"; . a ; ; ; ; "borne by: State"; ; . . a ; ; "MUST"; "Supervisory authorities and the Commission shall issue an opinion to the Board."; "modalities::logic::deontic"; 1.0000; . . a ; ; "SUBCLASS_OF"; "The excerpt is part of a class hierarchy related to data protection regulations."; "modalities::dl"; 1.0000; . a ; "65 Dispute resolution by the Board"@en; ; "d58718cfc5d11c84b7fa3a24113b2554bb118189e185fa6741e2242d5526fccf"; "The Board shall adopt a binding decision in certain cases."; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.74"; . a ; ; ; ; ; . . a ; ; "shall"; "Mandatory action by the Board"; "modalities::logic::deontic"; 1.0000; . a ; "66 Urgency procedure"@en; ; "abad948bd75f9f4f6126a09482997ff01fdc348aae23a1305ed25f64a1189689"; "Supervisory authority may adopt provisional measures to protect data subject rights and freedoms."; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.75"; . a ; ; ; ; "borne by: State"; ; . . a ; ; "May"; "Supervisory authority may adopt provisional measures."; "modalities::logic::deontic"; 1.0000; . a ; "67 Exchange of information"@en; ; "d4a31b2834220dcb22ada55371088c077905e015a3720a16ba15e8bd6a9dfc9d"; "Commission may adopt implementing acts for exchanging information by electronic means."; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.76"; . a ; ; ; ; . a ; "68 European Data Protection Board"@en; ; "1b05e7894f4acc7935f01198873fdab8d3f38f9281c74fe874329d95686476f7"; "Establishment of European Data Protection Board"; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.76"; . a ; ; ; ; "borne by: State"; ; . . a ; ; "establishes"; "Establishs the European Data Protection Board"; "modalities::logic::deontic"; 1.0000; . a ; "69 Independence"@en; ; "b1e303851ec2cc9334d2697cc3a91e2e77bca10cee8a3cfbf46c7444b40c1a68"; "The Board must act independently when performing its tasks or exercising its powers."; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.76"; . a ; ; ; ; ; . . a ; ; "MustActIndependently"; "The Board must act independently."; "The Board shall act independently when performing its tasks or exercising its powers."; "modalities::logic::deontic"; 1.0000; . . a ; ; "MustNotSeekInstructions"; "The Board must not seek instructions from anybody."; "Without prejudice to requests by the Commission referred to in point (b) of Article 70(1) and in Article 70(2), the Board shall, in the performance of its tasks or the exercise of its powers, neither seek nor take instructions from anybody."; "modalities::logic::deontic"; 1.0000; . . a ; ; "MustNotTakeInstructions"; "The Board must not take instructions from anybody."; "Without prejudice to requests by the Commission referred to in point (b) of Article 70(1) and in Article 70(2), the Board shall, in the performance of its tasks or the exercise of its powers, neither seek nor take instructions from anybody."; "modalities::logic::deontic"; 1.0000; . . a ; ; "MustActPursuantToArticles"; "The Board must act pursuant to Articles 70 and 71."; "The Board shall act independently when performing its tasks or exercising its powers pursuant to Articles 70 and 71."; "modalities::logic::deontic"; 1.0000; . . a ; ; "MustActIndependentlyPursuantToArticles"; "The Board must act independently pursuant to Articles 70 and 71."; "The Board shall act independently when performing its tasks or exercising its powers pursuant to Articles 70 and 71."; "modalities::logic::deontic"; 1.0000; . a ; "70 Tasks of the Board"@en; ; "c198e8140880dc4e5f7781580fd847b5cd5fea1a29167eb02a0d63db1f1ca5a7"; "The Board shall ensure the consistent application of this Regulation."; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.76"; . a ; ; ; ; ; . . a ; ; "shall"; "Ensure consistent application"; "modalities::logic::deontic"; 1.0000; . a ; "71 Reports"@en; ; "347914b1e642b22e536be12a05474543382769d399716cda474c995800aa79e7"; "Annual report on protection of natural persons must be made public and transmitted to EU institutions."; "Yes"; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.78"; . a ; ; ; ; "borne by: State"; ; . . a ; ; "MUST"; "Annual report must be made public and transmitted."; "modalities::logic::deontic"; 1.0000; . a ; "72 Procedure"@en; ; "8c9fed7c1fb577de51d2c5d4ff8ad506f531d70443e85f2f214bfa5c65fdbb7f"; "The Board must take decisions by a simple majority of its members."; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.78"; . a ; ; ; ; ; . . a ; ; "MUST"; "The Board must take decisions by a simple majority of its members."; "modalities::logic::deontic"; 1.0000; . a ; "73 Chair"@en; ; "39e6f3e63f87328bec1d3024bb7daba7c9d1f80f3bf8c3891769cab0b2bdc063"; "The Board must elect a chair and two deputy chairs."; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.78"; . a ; ; ; ; ; . . a ; ; "MUST"; "Must provide a chair and deputy chairs."; "modalities::logic::deontic"; 1.0000; . a ; "74 Tasks of the Chair"@en; ; "6e94b5133e66f550d9f0d8b0809b5060a33a9499c6a0dd19bf1722e1643f7189"; "Chair's tasks and responsibilities"; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.79"; . a ; ; ; ; "borne by: State"; ; . . a ; ; "hasTask"; "Chair has specific tasks"; "modalities::logic::deontic"; 1.0000; . a ; "75 Secretariat"@en; ; "bf53063c817430f464b91a44a07e89ee5465b91400c52b8979b8725b0bdc7f96"; "Establishment of secretariat and its tasks"; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.79"; . a ; ; ; ; . . a ; ; "establishes"; "Establishs the Board's secretariat"; "modalities::logic::deontic"; 1.0000; . . a ; ; "hasPart"; "Defines the tasks of the secretariat"; "modalities::dl"; 1.0000; . a ; "76 Confidentiality"@en; ; "3a26294ca1c4add47e8c900e66e6dfbb2fe1705114b583c3ac0fe5a04e484fb8"; "Confidentiality discussions shall be kept confidential."; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.79"; . a ; ; ; ; "borne by: State"; ; . . a ; ; "obligation"; "Obligation to keep confidentiality."; "modalities::logic::deontic"; 1.0000; . a ; "77 Right to lodge a complaint with a supervisory authority"@en; ; "7727429342f8bbcd540eea096eee8d50ce8233e14ac1e4564bc373043433a513"; "Right to lodge a complaint with a supervisory authority"; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.80"; . a ; ; ; ; "borne by: NaturalPerson"; ; . . a ; ; "Obligation"; "Obligation to lodge a complaint"; "modalities::logic::deontic"; 1.0000; . . a ; ; "Overlaps"; "Temporal overlap between complaint lodging and supervisory authority processing"; "modalities::interval_reasoning"; 1.0000; . a ; "78 Right to an effective judicial remedy against a supervisory authority"@en; ; "c65cf44736fccf625040f50ddcf8af411f38943eac0d1e271eb93b6cbf9ba7f0"; "Right to an effective judicial remedy against a supervisory authority"; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.80"; . a ; ; ; ; "borne by: NaturalPerson"; ; . . a ; ; "Obligation"; "Right to an effective judicial remedy"; "modalities::logic::deontic"; 1.0000; . a ; "79 Right to an effective judicial remedy against a controller or processor"@en; ; "8c28335eaf0a7329dc86dddb6658dcd02afc2d2e0b24004e06cec5cb4ce62737"; "Right to an effective judicial remedy against a controller or processor"; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.80"; . a ; ; ; ; ; . . a ; ; "="; "Right exists"; "Data subject has rights under this Regulation"; "Controller or processor must provide effective judicial remedy"; "modalities::logic::deontic"; 1.0000; . . a ; ; "<-"; "Right is enforceable"; "Data subject has right to lodge complaint with supervisory authority"; "Controller or processor must provide effective judicial remedy"; "modalities::logic::deontic"; 1.0000; . a ; "80 Representation of data subjects"@en; ; "3c449d65e824229a3decfb05bf2a9ca502002e7ba3658d8dea9f173f0634f118"; "Data subject has right to mandate a not-for-profit body to lodge complaint on their behalf."; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.81"; . a ; ; ; ; "held by: State"; ; . . a ; ; "hasRightTo"; "Data subject has right to mandate a not-for-profit body."; "modalities::logic::deontic"; 1.0000; . a ; "81 Suspension of proceedings"@en; ; "4a1d2429b33aeb2a6c678fb7e9125aeaf18dd9b2ae5c4557620652d86b3d9350"; "Court must contact other court in another Member State before proceeding with similar proceedings."; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.81"; . a ; ; ; ; ; . . a ; ; "Prohibit"; "Court must not proceed without contacting other court."; "Court has information on proceedings in another Member State."; "Court must contact other court."; "modalities::logic::deontic"; 1.0000; . a ; "82 Right to compensation and liability"@en; ; "f28f46599af1ad828e6f8fc98fab8dedfecaadd3611803ce9f22bfe8b48d18b4"; "Right to receive compensation for material or non-material damage caused by infringement of the Regulation."; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.81"; . a ; ; ; ; "borne by: NaturalPerson"; ; . . a ; ; "Obligation"; "Right to compensation"; "modalities::logic::deontic"; 1.0000; . a ; "83 General conditions for imposing administrative fines"@en; ; "364728ceea44776492769066df1669994f705fab71808ef0296fd0f8c7453931"; "Administrative fines shall be imposed in accordance with certain conditions."; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.82"; . a ; ; ; ; "borne by: State"; ; . . a ; ; "Obligation"; "Imposition of administrative fines is an obligation."; "modalities::logic::deontic"; 1.0000; . . a ; ; "Overlaps"; "The duration of the infringement is relevant."; "duration of the infringement"; "modalities::interval_reasoning"; 0.7000; . . a ; ; "Until"; "The fine must be imposed before a certain point in time."; "point in time"; "modalities::temporal_ltl"; 0.6000; . . a ; ; "Permission"; "The supervisory authority has permission to impose the fine."; "modalities::logic::deontic"; 0.5000; . a ; "84 Penalties"@en; ; "08b89040135c868f5caa78595ac5a1d24660e749c7c2c8a9db39b4221ffead24"; "Member States must implement penalties for infringements not subject to administrative fines."; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.83"; . a ; ; ; ; ; . . a ; ; "MUST"; "Member States must implement penalties."; "modalities::logic::deontic"; 1.0000; . a ; "85 Processing and freedom of expression and information"@en; ; "d3c10c61c78050ce462f58329f124a76d7acc23ee861c20460b1863eaf14cf02"; "Member States shall reconcile the right to protection of personal data with the right to freedom of expression and information."; "Exemptions or derogations from certain chapters"; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.83"; . a ; ; ; ; "borne by: State"; ; . . a ; ; "shall"; "Implies an obligation"; "modalities::logic::deontic"; 1.0000; . a ; "86 Processing and public access to official documents"@en; ; "b6a8baf4c1396680285c06eb085342c5fad795bb504a14cff268093a4c625c85"; "Personal data may be disclosed to reconcile public access with personal data protection."; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.84"; . a ; ; ; ; ; . a ; "87 Processing of the national identification number"@en; ; "11b5dc4a1a821a683a8b53a59b55d95c9c3deb70f89ec7175b7dc609dfb63d8a"; "Member States must determine specific conditions for processing national identification numbers."; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.84"; . a ; ; ; ; ; . . a ; ; "MUST"; "Member States must determine specific conditions."; "modalities::logic::deontic"; 1.0000; . a ; "88 Processing in the context of employment"@en; ; "845c2cd1813750c24775103cc7978a88e702810ce061db1f19ee5118e4c23b5d"; "Member States must provide specific rules for processing employees' personal data."; "Yes"; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.84"; . a ; ; ; ; "borne by: State"; ; . . a ; ; "MUST"; "Member States must provide specific rules."; "modalities::logic::deontic"; 1.0000; . a ; "89 Safeguards and derogations relating to processing for archiving purposes in the public interest,"@en; ; "de7291ad19d0751575bd8bf15bc66cff1b97a681a905f3127c4767986f3119c9"; "Processing for archiving purposes in the public interest shall be subject to appropriate safeguards."; "safeguards, in accordance with this Regulation, for the rights and freedoms of the data subject"; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.84"; . a ; ; ; ; ; . . a ; ; "shall"; "Imposes a duty on Union or Member State law to provide safeguards."; "safeguards, in accordance with this Regulation, for the rights and freedoms of the data subject"; "modalities::logic::deontic"; 1.0000; . a ; "90 Obligations of secrecy"@en; ; "36332746a08f1ac70e537962c5266563f9c47d91f862f2dfa77a3f95fd62df01"; "Member States may adopt rules on supervisory authorities' powers regarding controllers or processors with obligations of secrecy."; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.85"; . a ; ; ; ; "borne by: State"; ; . . a ; ; "May"; "Member States may adopt rules."; "modalities::logic::deontic"; 1.0000; . a ; "91 Existing data protection rules of churches and religious associations"@en; ; "ce3b263c7f4da85d3dd01d6f31e3a2f999f8515dd65ebe697079285b3444e9e2"; "Existing data protection rules of churches and religious associations may continue to apply provided they are brought into line with the Regulation."; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.85"; . a ; ; ; ; ; . . a ; ; "Continuation"; "Rules continue to apply"; "Existing rules may be brought into line with the Regulation"; "Obligation to comply"; "modalities::logic::deontic"; 1.0000; . a ; "92 Exercise of the delegation"@en; ; "13f2f7c22b156b3b531684f4cc9aa9821718bcd1d495cf0eeebf1a6cb04c4135"; "Delegation of power and notification requirements for delegated acts."; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.85"; . a ; ; ; ; ; . . a ; ; "Obligation"; "Requires notification and approval for delegated acts."; "modalities::logic::deontic"; 0.5000; . . a ; ; "until"; "Defines the time period for objections to delegated acts."; "modalities::temporal_ltl"; 0.5000; . . a ; ; "Permission"; "Allows revocation of delegated power by EU institutions."; "modalities::logic::deontic"; 0.5000; . a ; "93 Committee procedure"@en; ; "25e6af8eea7a51a9cd86f97f92232da704dc22bf722a57da0ecfa365acc11fee"; "Establishment of a committee for the Commission."; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.86"; . a ; ; ; ; . a ; "94 Repeal of Directive 95/46/EC"@en; ; "0e698f29fbf79c438f3f0b4bb50ee52798996f14979cb2ba4b34c20ab63cb875"; "Repeal of Directive 95/46/EC"; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.86"; . a ; ; ; ; . . a ; ; "Applicable"; "Establishes a new reference point for personal data processing"; "References to the repealed Directive shall be construed as references to this Regulation"; "References to the Working Party on the Protection of Individuals with regard to the Processing of Personal Data established by Article 29 of Directive 95/46/EC shall be construed as references to the European Data Protection Board established by this Regulation"; "modalities::logic::deontic"; 0.5000; . a ; "95 Relationship with Directive 2002/58/EC"@en; ; "3f21b0ac57c2e0a561ad9ce2a373ca06ca50831d6d32ea1eb87b0875f26610e3"; "No additional obligations on processing in relation to Directive 2002/58/EC"; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.86"; . a ; ; ; ; "borne by: State"; ; . . a ; ; "Implies"; "No additional obligations"; "Processing in relation to Directive 2002/58/EC"; "No additional obligations"; "modalities::logic::deontic"; 1.0000; . a ; "96 Relationship with previously concluded Agreements"@en; ; "5fe7b33e43c4957a3988b499ad1e4464ad14d31635ef64de349587b3183f628c"; "International agreements involving personal data transfer remain in force until amended or revoked."; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.87"; . a ; ; ; ; . a ; "97 Commission reports"@en; ; "44eb49293164f5d2ae6a2d635ed73ec6c206a2486b72e264ac211972d57165e0"; "The Commission must submit reports on the evaluation and review of this Regulation."; "Yes"; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.87"; . a ; ; ; ; ; . . a ; ; "MUST"; "The Commission must submit reports."; "modalities::logic::deontic"; 1.0000; . a ; "98 Review of other Union legal acts on data protection"@en; ; "251350f10d86c56436fcae0b0f80af6561666ad7cdb3ad65057e4e6be9877b7f"; "Commission may submit legislative proposals for amending data protection acts."; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.87"; . a ; ; ; ; . . a ; ; "Applicable"; "Requires temporal relation"; "if appropriate, submit..."; "...with a view to amending"; "modalities::interval_reasoning"; 1.0000; . a ; "99 Entry into force and application"@en; ; "803538ccf3bbb2181c020549e390ef62c6baa08ab9bbc9eabf34b751b5c19b78"; "Regulation entry into force and application"; ; "2"; ; ; "general-data-protection-regulation-eu-2016-679.pdf, p.87"; . a ; ; ; ; "borne by: State"; ; . . a ; ; "shall"; "Binding obligation"; "modalities::logic::deontic"; 1.0000; .