Regulation (EU) 2016/679: the full text
The GDPR as published in the Official Journal, and the articles worth knowing.
The complete text of the General Data Protection Regulation is published on EUR-Lex. When a summary is not sufficient, or when a specific obligation is in question, this is the authoritative source.
How to navigate it
The Regulation runs to 99 articles preceded by 173 recitals. The recitals set out the reasoning behind the provisions and often clarify wording that would otherwise be ambiguous.
The articles most often consulted
Article 5 holds the processing principles. Article 6 covers lawful bases. Articles 12 to 23 set out individual rights. Article 32 addresses security of processing, and Articles 33 and 34 cover breach notification.
Reading it alongside national law
The GDPR leaves room for member states to legislate in certain areas, including employment data. The Regulation is the starting point, but national provisions may add to it.
Train your teams on this
Our GDPR & Cyber Defence courses cover data protection alongside NIS2 and DORA resilience.