Section 1 – General obligations
Article 24– Responsibility of the controller
Article 25– Data protection by design and by default
Article 26– Joint controllers
Article 27– Representatives of controllers or processors not established in the Union
Article 28– Processor
Article 29– Processing under the authority of the controller or processor
Article 30– Records of processing activities
Article 31– Cooperation with the supervisory authority
