- Section 62 Processing carried out on behalf of a controller
- Section 63 Joint controllers
- Section 64 Requirements for the security of data processing
- Section 65 Notifying the Federal Commissioner of a personal data breach
- Section 66 Notifying data subjects affected by a personal data breach
- Section 67 Conducting a data protection impact assessment
- Section 68 Cooperation with the Federal Commissioner
- Section 69 Prior consultation of the Federal Commissioner
- Section 70 Records of processing activities
- Section 71 Data protection by design and by default
- Section 72 Distinction between different categories of data subjects
- Section 73 Distinction between facts and personal assessments
- Section 74 Procedures for data transfers
- Section 75 Rectification and erasure of personal data and restriction of processing
- Section 76 Logging
- Section 77 Confidential reporting of violations
