Section 1
General obligations
Article 24
Responsibility of the controller
Article 25
Data protection by design and by default
Article 26
Joint controllers
Article 27
Representatives of controllers or processors not established in the Union
Article 28
Processor
Article 29
Processing under the authority of the controller or processor
Article 30
Records of processing activities
Article 31
Cooperation with the supervisory authority