Chapter 4 – Obligations of controllers and processors

Section 62 Processing carried out on behalf of a controller
Section 63 Joint controllers
Section 64 Requirements for the security of data processing
Section 65 Notifying the Federal Commissioner of a personal data breach
Section 66 Notifying data subjects affected by a personal data breach
Section 67 Conducting a data protection impact assessment
Section 68 Cooperation with the Federal Commissioner
Section 69 Prior consultation of the Federal Commissioner
Section 70 Records of processing activities
Section 71 Data protection by design and by default
Section 72 Distinction between different categories of data subjects
Section 73 Distinction between facts and personal assessments
Section 74 Procedures for data transfers
Section 75 Rectification and erasure of personal data and restriction of processing
Section 76 Logging
Section 77 Confidential reporting of violations