§ GDPR · Article 24

GDPR Article 24: Obligations, Deadlines & Penalties

Regulation (EU) 2016/679, Article 24 · All obligations · GDPR

At a glance

Article 24 of the GDPR imposes 3 obligations on controller.

§ Obligations

All obligations under Article 24

Obligation 1

The controller shall implement appropriate technical and organisational measures to ensure and to be able to demonstrate that processing is performed in accordance with this Regulation. Regulation (EU) 2016/679, Article 24, Article 24

Obligated entity: controller
Action required: implement
Deadline: —
Penalty: —

Obligation 2

The controller shall review and update the technical and organisational measures where necessary. Regulation (EU) 2016/679, Article 24, Article 24

Obligated entity: controller
Action required: review
Deadline: —
Penalty: —

Obligation 3

Where proportionate in relation to processing activities, the controller shall implement appropriate data protection policies. Regulation (EU) 2016/679, Article 24, Article 24

Obligated entity: controller
Action required: implement
Deadline: —
Penalty: —

§ Frequently asked

Questions about Article 24

Who must comply with Article 24 of the GDPR? +

controller.

What does Article 24 of the GDPR require? +

implement review

Need a cross-border briefing on GDPR Article 24?

Search Fontvera ↵

All EU obligation pages · All GDPR articles