Preamble
Recitals 173
Chapter I - General provisions (Article 1-4) 4
Chapter II - Principles (Article 5-11) 7
Chapter III - Rights of the data subject (Article 12-23) 12
Chapter IV - Controller and processor (Article 24-43) 20
Chapter V - Transfers of personal data to third countries or international organisations (Article 44-50) 7
Chapter VI - Independent supervisory authorities (Article 51-59) 9
Chapter VII - Cooperation and consistency (Article 60-76) 17
Chapter VIII - Remedies, liability and penalties (Article 77-84) 8
Chapter IX - Provisions relating to specific processing situations (Article 85-91) 7
Chapter X - Delegated acts and implementing acts (Article 92-93) 2
Chapter XI - Final provisions (Article 94-99) 6

cross-border processing

Definitions over time (1)

04/05/2016 – 24/05/2016 Article 4, Regulation (EU) 2016/679 (GDPR) Scope: Whole act

‘cross-border processing’ means either: processing of personal data which takes place in the context of the activities of establishments in more than one Member State of a controller or processor in the Union where the controller or processor is established in more than one Member State; or processing of personal data which takes place in the context of the activities of a single establishment of a controller or processor in the Union but which substantially affects or is likely to substantially affect data subjects in more than one Member State.

Each has its own scope, dates and uses. Open one to see when it applies.

No text uses this concept on 12/11/2026.