- Chapter 1 – Legal basis for processing personal data
- Sub-chapter 1 – Processing of special categories of personal data and processing for other purposes
- Sub-chapter 2 – Special processing situations
- Section 26 Data processing for employment-related purposes
- Section 27 Data processing for purposes of scientific or historical research and for statistical purposes
- Section 28 Data processing for archiving purposes in the public interest
- Section 29 Rights of the data subject and powers of the supervisory authorities in the case of secrecy obligations
- Section 30 Consumer loans
- Section 31 Protection of commercial transactions in the case of scoring and credit reports
- Chapter 2 – Rights of the data subject
- Section 32 Information to be provided where personal data are collected from the data subject
- Section 33 Information to be provided where personal data have not been obtained from the data subject
- Section 34 Right of access by the data subject
- Section 35 Right to erasure
- Section 36 Right to object
- Section 37 Automated individual decision-making, including profiling
- Chapter 3 – Obligations of controllers and processors
- Chapter 4 -Supervisory authorities for data processing by private bodies
- Chapter 5 – Penalties
- Chapter 6 – Legal remedies
