Search Legislation

Advanced Search

Regulation (EU) 2018/1725 of the European Parliament and of the CouncilShow full title

Regulation (EU) 2018/1725 of the European Parliament and of the Council of 23 October 2018 on the protection of natural persons with regard to the processing of personal data by the Union institutions, bodies, offices and agencies and on the free movement of such data, and repealing Regulation (EC) No 45/2001 and Decision No 1247/2002/EC (Text with EEA relevance) (revoked)

Help about what version

What Version

Help about opening options

Opening Options

Help about UK-EU Regulation

Legislation originating from the EU

When the UK left the EU, legislation.gov.uk published EU legislation that had been published by the EU up to IP completion day (31 December 2020 11.00 p.m.). On legislation.gov.uk, these items of legislation are kept up-to-date with any amendments made by the UK since then.

Close

This item of legislation originated from the EU

Legislation.gov.uk publishes the UK version. EUR-Lex publishes the EU version. The EU Exit Web Archive holds a snapshot of EUR-Lex’s version from IP completion day (31 December 2020 11.00 p.m.).

Changes to legislation:

There are currently no known outstanding effects for the Regulation (EU) 2018/1725 of the European Parliament and of the Council. Help about Changes to Legislation

Close

Changes to Legislation

Revised legislation carried on this site may not be fully up to date. At the current time any known changes or effects made by subsequent legislation have been applied to the text of the legislation you are viewing by the editorial team. Please see ‘Frequently Asked Questions’ for details regarding the timescales for which new effects are identified and recorded on this site.

  1. Introductory Text

  2. CHAPTER I GENERAL PROVISIONS

    1. Article 1.Subject matter and objectives

    2. Article 2.Scope

    3. Article 3.Definitions

  3. CHAPTER II GENERAL PRINCIPLES

    1. Article 4.Principles relating to processing of personal data

    2. Article 5.Lawfulness of processing

    3. Article 6.Processing for another compatible purpose

    4. Article 7.Conditions for consent

    5. Article 8.Conditions applicable to a child’s consent in relation to information society services

    6. Article 9.Transmissions of personal data to recipients established in the Union other than Union institutions and bodies

    7. Article 10.Processing of special categories of personal data

    8. Article 11.Processing of personal data relating to criminal convictions and offences

    9. Article 12.Processing which does not require identification

    10. Article 13.Safeguards relating to processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes

  4. CHAPTER III RIGHTS OF THE DATA SUBJECT

    1. SECTION 1 Transparency and modalities

      1. Article 14.Transparent information, communication and modalities for the exercise of the rights of the data subject

    2. SECTION 2 Information and access to personal data

      1. Article 15.Information to be provided where personal data are collected from the data subject

      2. Article 16.Information to be provided where personal data have not been obtained from the data subject

      3. Article 17.Right of access by the data subject

    3. SECTION 3 Rectification and erasure

      1. Article 18.Right to rectification

      2. Article 19.Right to erasure (‘right to be forgotten’)

      3. Article 20.Right to restriction of processing

      4. Article 21.Notification obligation regarding rectification or erasure of personal data or restriction of processing

      5. Article 22.Right to data portability

    4. SECTION 4 Right to object and automated individual decision-making

      1. Article 23.Right to object

      2. Article 24.Automated individual decision-making, including profiling

    5. SECTION 5 Restrictions

      1. Article 25.Restrictions

  5. CHAPTER IV CONTROLLER AND PROCESSOR

    1. SECTION 1 General obligations

      1. Article 26.Responsibility of the controller

      2. Article 27.Data protection by design and by default

      3. Article 28.Joint controllers

      4. Article 29.Processor

      5. Article 30.Processing under the authority of the controller or processor

      6. Article 31.Records of processing activities

      7. Article 32.Cooperation with the European Data Protection Supervisor

    2. SECTION 2 Security of personal data

      1. Article 33.Security of processing

      2. Article 34.Notification of a personal data breach to the European Data Protection Supervisor

      3. Article 35.Communication of a personal data breach to the data subject

    3. SECTION 3 Confidentiality of electronic communications

      1. Article 36.Confidentiality of electronic communications

      2. Article 37.Protection of information transmitted to, stored in, related to, processed by and collected from users’ terminal equipment

      3. Article 38.Directories of users

    4. SECTION 4 Data protection impact assessment and prior consultation

      1. Article 39.Data protection impact assessment

      2. Article 40.Prior consultation

    5. SECTION 5 Information and legislative consultation

      1. Article 41.Information and consultation

      2. Article 42.Legislative consultation

    6. SECTION 6 Data protection officer

      1. Article 43.Designation of the data protection officer

      2. Article 44.Position of the data protection officer

      3. Article 45.Tasks of the data protection officer

  6. CHAPTER V TRANSFERS OF PERSONAL DATA TO THIRD COUNTRIES OR INTERNATIONAL ORGANISATIONS

    1. Article 46.General principle for transfers

    2. Article 47.Transfers on the basis of an adequacy decision

    3. Article 48.Transfers subject to appropriate safeguards

    4. Article 49.Transfers or disclosures not authorised by Union law

    5. Article 50.Derogations for specific situations

    6. Article 51.International cooperation for the protection of personal data

  7. CHAPTER VI EUROPEAN DATA PROTECTION SUPERVISOR

    1. Article 52.European Data Protection Supervisor

    2. Article 53.Appointment of the European Data Protection Supervisor

    3. Article 54.Regulations and general conditions governing the performance of the European Data Protection Supervisor’s duties, staff and financial resources

    4. Article 55.Independence

    5. Article 56.Professional secrecy

    6. Article 57.Tasks

    7. Article 58.Powers

    8. Article 59.Obligation of controllers and processors to react to allegations

    9. Article 60.Activities report

  8. CHAPTER VII COOPERATION AND CONSISTENCY

    1. Article 61.Cooperation between the European Data Protection Supervisor and national supervisory authorities

    2. Article 62.Coordinated supervision by the European Data Protection Supervisor and national supervisory authorities

  9. CHAPTER VIII REMEDIES, LIABILITY AND PENALTIES

    1. Article 63.Right to lodge a complaint with the European Data Protection Supervisor

    2. Article 64.Right to an effective judicial remedy

    3. Article 65.Right to compensation

    4. Article 66.Administrative fines

    5. Article 67.Representation of data subjects

    6. Article 68.Complaints by Union staff

    7. Article 69.Sanctions

  10. CHAPTER IX PROCESSING OF OPERATIONAL PERSONAL DATA BY UNION BODIES, OFFICES AND AGENCIES WHEN CARRYING OUT ACTIVITIES WHICH FALL WITHIN THE SCOPE OF CHAPTER 4 OR CHAPTER 5 OF TITLE V OF PART THREE TFEU

    1. Article 70.Scope of the Chapter

    2. Article 71.Principles relating to processing of operational personal data

    3. Article 72.Lawfulness of processing of operational personal data

    4. Article 73.Distinction between different categories of data subjects

    5. Article 74.Distinction between operational personal data and verification of the quality of operational personal data

    6. Article 75.Specific processing conditions

    7. Article 76.Processing of special categories of operational personal data

    8. Article 77.Automated individual decision-making, including profiling

    9. Article 78.Communication and modalities for exercising the rights of the data subject

    10. Article 79.Information to be made available or given to the data subject

    11. Article 80.Right of access by the data subject

    12. Article 81.Limitations to the right of access

    13. Article 82.Right to rectification or erasure of operational personal data and restriction of processing

    14. Article 83.Right of access in criminal investigations and proceedings

    15. Article 84.Exercise of rights by the data subject and verification by the European Data Protection Supervisor

    16. Article 85.Data protection by design and by default

    17. Article 86.Joint controllers

    18. Article 87.Processor

    19. Article 88.Logging

    20. Article 89.Data protection impact assessment

    21. Article 90.Prior consultation of the European Data Protection Supervisor

    22. Article 91.Security of processing of operational personal data

    23. Article 92.Notification of a personal data breach to the European Data Protection Supervisor

    24. Article 93.Communication of a personal data breach to the data subject

    25. Article 94.Transfer of operational personal data to third countries and international organisations

    26. Article 95.Secrecy of judicial inquiries and criminal proceedings

  11. CHAPTER X IMPLEMENTING ACTS

    1. Article 96.Committee procedure

  12. CHAPTER XI REVIEW

    1. Article 97.Review clause

    2. Article 98.Review of Union legal acts

  13. CHAPTER XII FINAL PROVISIONS

    1. Article 99.Repeal of Regulation (EC) No 45/2001 and of Decision No 1247/2002/EC

    2. Article 100.Transitional measures

    3. Article 101.Entry into force and application

  14. Signature

Back to top

Options/Help

Print Options

Close

Legislation is available in different versions:

Latest Available (revised):The latest available updated version of the legislation incorporating changes made by subsequent legislation and applied by our editorial team. Changes we have not yet applied to the text, can be found in the ‘Changes to Legislation’ area.

Original (As adopted by EU): The original version of the legislation as it stood when it was first adopted in the EU. No changes have been applied to the text.

Close

Opening Options

Different options to open legislation in order to view more content on screen at once

Close

More Resources

Access essential accompanying documents and information for this legislation item from this tab. Dependent on the legislation item being viewed this may include:

  • the original print PDF of the as adopted version that was used for the EU Official Journal
  • lists of changes made by and/or affecting this legislation item
  • all formats of all associated documents
  • correction slips
  • links to related legislation and further information resources
Close

Timeline of Changes

This timeline shows the different versions taken from EUR-Lex before exit day and during the implementation period as well as any subsequent versions created after the implementation period as a result of changes made by UK legislation.

The dates for the EU versions are taken from the document dates on EUR-Lex and may not always coincide with when the changes came into force for the document.

For any versions created after the implementation period as a result of changes made by UK legislation the date will coincide with the earliest date on which the change (e.g an insertion, a repeal or a substitution) that was applied came into force. For further information see our guide to revised legislation on Understanding Legislation.

Close

More Resources

Use this menu to access essential accompanying documents and information for this legislation item. Dependent on the legislation item being viewed this may include:

  • the original print PDF of the as adopted version that was used for the print copy
  • correction slips

Click 'View More' or select 'More Resources' tab for additional information including:

  • lists of changes made by and/or affecting this legislation item
  • confers power and blanket amendment details
  • all formats of all associated documents
  • links to related legislation and further information resources