Contents

1. Subject matter, material and territorial scope, and definitions

2. The data protection principles

3. Data subjects' rights

4. Controllers and processors, breach notification and DPOs

5. Data transfers

6. Independent supervisory authorities

7. Co-operation and consistency

8. Remedies, liability and penalties

9. Provisions relating to specific processing situations

10. Delegated acts and implementing acts

11. Final provisions

Appendices.

About the Author

James Castro-Edwards of Wedlake Bell advises organisations in the private, public and third sectors on data protection issues. His experience includes managing global data protection compliance projects for multinational companies, providing advice on discrete data protection issues and advising companies that have suffered a data breach

If your organisation can't demonstrate that good data protection is a cornerstone of your business policy and practices, you're leaving your organisation open to enforcement action that can damage both public reputation and bank balance. That makes data protection a boardroom issue.” Elizabeth Denham, UK Information Commissioner, July 2017 (taken from the foreword to EU General Data Protection Regulation)