- Article 24 – Responsibility of the controller - Article 24 GDPR
- Article 25 – Data protection by design and by default - Article 25 GDPR
- Article 26 – Joint controllers - Article 26 GDPR
- Article 27 – Representatives of controllers or processors not established in the Union - Article 27 GDPR
- Article 28 – Processor - Article 28 GDPR
- Article 29 – Processing under the authority of the controller or processor - Article 29 GDPR
- Article 30 – Records of processing activities - Article 30 GDPR
- Article 31 – Cooperation with the supervisory authority - Article 31 GDPR