| 💼 Art. 24 Responsibility of the controller | | | | |
| 💼 Art. 25 Data protection by design and by default | | 10 | 10 | |
| 💼 Art. 26 Joint controllers | | | | |
| 💼 Art. 27 Representatives of controllers or processors not established in the Union | | | | |
| 💼 Art. 28 Processor | | | | |
| 💼 Art. 29 Processing under the authority of the controller or processor | | | | |
| 💼 Art. 30 Records of processing activities | | 3 | 4 | |
| 💼 Art. 31 Cooperation with the supervisory authority | | | | |
| 💼 Art. 32 Security of processing | | 5 | 5 | |
| 💼 Art. 33 Notification of a personal data breach to the supervisory authority | | | | |
| 💼 Art. 34 Communication of a personal data breach to the data subject | | | | |
| 💼 Art. 35 Data protection impact assessment | | | | |
| 💼 Art. 36 Prior consultation | | | | |
| 💼 Art. 37 Designation of the data protection officer | | | | |
| 💼 Art. 38 Position of the data protection officer | | | | |
| 💼 Art. 39 Tasks of the data protection officer | | | | |
| 💼 Art. 40 Codes of conduct | | | | |
| 💼 Art. 41 Monitoring of approved codes of conduct | | | | |
| 💼 Art. 42 Certification | | | | |
| 💼 Art. 43 Certification bodies | | | | |