https://artifacts.trustmarkinitiative.org/lib/tips/gdpr-data-controller-compliance-profile/1.0/GDPR Data Controller Compliance Profile1.0Profile of requirements from the General Data Protection Regulation (GDPR) (EU) 2016/679 for the role of a Data Controller.2025-05-15T00:00:00.000ZtrueThis artifact is published by the Georgia Tech Research Institute (GTRI) as part of the Trustmark Initiative. This artifact and the information contained herein is provided on an "AS IS" basis, and GTRI disclaims all warranties, express or implied, including but not limited to any warranty that the use of the information herein will not infringe any rights or any implied warranties or merchantability or fitness for a particular purpose. In addition, GTRI disclaims legal liability for any loss incurred as a result of the use or reliance on the document or the information contained herein.https://trustmarkinitiative.org/TMIPRIMARYhelp@trustmarkinitiative.org555-555-5555https://trustmarkinitiative.org/GDPRData ProtectionPrivacyData PrivacyData Controllerhttps://artifacts.trustmarkinitiative.org/lib/tds/lawful-fair-and-transparent-processing-of-personal-data/1.0/1Lawful, Fair, and Transparent Processing of Personal Data1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 5(1)(a).https://artifacts.trustmarkinitiative.org/lib/tds/purpose-limitation-for-collected-personal-data/1.0/2Purpose Limitation for Collected Personal Data1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 5(1)(b).https://artifacts.trustmarkinitiative.org/lib/tds/data-minimization-for-processing-purposes/1.0/3Data Minimization for Processing Purposes1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 5(1)(c).https://artifacts.trustmarkinitiative.org/lib/tds/accuracy-and-timely-rectification-of-personal-data/1.0/4Accuracy and Timely Rectification of Personal Data1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 5(1)(d).https://artifacts.trustmarkinitiative.org/lib/tds/storage-limitation-based-on-processing-necessity/1.0/5Storage Limitation Based on Processing Necessity1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 5(1)(e).https://artifacts.trustmarkinitiative.org/lib/tds/security-and-protection-of-personal-data/1.0/6Security and Protection of Personal Data1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 5(1)(f).https://artifacts.trustmarkinitiative.org/lib/tds/accountability-for-compliance-with-processing-principles/1.0/7Accountability for Compliance with Processing Principles1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 5(2).https://artifacts.trustmarkinitiative.org/lib/tds/consent-based-processing-of-personal-data/1.0/8Consent-Based Processing of Personal Data1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 6(1)(a).https://artifacts.trustmarkinitiative.org/lib/tds/contractual-necessity-as-legal-basis/1.0/9Contractual Necessity as Legal Basis1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 6(1)(b).https://artifacts.trustmarkinitiative.org/lib/tds/legal-obligation-as-legal-basis/1.0/10Legal Obligation as Legal Basis1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 6(1)(c).https://artifacts.trustmarkinitiative.org/lib/tds/vital-interests-as-legal-basis/1.0/11Vital Interests as Legal Basis1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 6(1)(d).https://artifacts.trustmarkinitiative.org/lib/tds/public-interest-or-official-authority-as-legal-basis/1.0/12Public Interest or Official Authority as Legal Basis1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 6(1)(e).https://artifacts.trustmarkinitiative.org/lib/tds/legitimate-interests-as-legal-basis/1.0/13Legitimate Interests as Legal Basis1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 6(1)(f).https://artifacts.trustmarkinitiative.org/lib/tds/demonstrability-of-consent/1.0/14Demonstrability of Consent1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 7(1).https://artifacts.trustmarkinitiative.org/lib/tds/clarity-and-accessibility-of-consent-requests/1.0/15Clarity and Accessibility of Consent Requests1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 7(2).https://artifacts.trustmarkinitiative.org/lib/tds/right-to-withdraw-consent/1.0/16Right to Withdraw Consent1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 7(3).https://artifacts.trustmarkinitiative.org/lib/tds/freely-given-consent/1.0/17Freely Given Consent1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 7(4).https://artifacts.trustmarkinitiative.org/lib/tds/age-based-limitation-on-processing-children_s-data/1.0/18Age-Based Limitation on Processing Children's Data1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 8(1).https://artifacts.trustmarkinitiative.org/lib/tds/verification-of-parental-consent/1.0/19Verification of Parental Consent1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 8(2).https://artifacts.trustmarkinitiative.org/lib/tds/reliance-on-explicit-consent-for-special-category-data/1.0/20Reliance on Explicit Consent for Special Category Data1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 9(2)(a).https://artifacts.trustmarkinitiative.org/lib/tds/reliance-on-employment-and-social-protection-obligations/1.0/21Reliance on Employment and Social Protection Obligations1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 9(2)(b).https://artifacts.trustmarkinitiative.org/lib/tds/reliance-on-vital-interests-exception-for-processing-special-categories-of-personal-data/1.0/22Reliance on Vital Interests Exception for Processing Special Categories of Personal Data1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 9(2)(c).https://artifacts.trustmarkinitiative.org/lib/tds/reliance-on-non-profit-organizations-exception-for-processing-special-categories-of-personal-data/1.0/23Reliance on Non-Profit Organizations Exception for Processing Special Categories of Personal Data1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 9(2)(d).https://artifacts.trustmarkinitiative.org/lib/tds/reliance-on-public-disclosure-by-data-subject-exception-for-processing-special-categories-of-personal-data/1.0/24Reliance on Public Disclosure by Data Subject Exception for Processing Special Categories of Personal Data1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 9(2)(e).https://artifacts.trustmarkinitiative.org/lib/tds/reliance-on-legal-claims-exception-for-processing-special-categories-of-personal-data/1.0/25Reliance on Legal Claims Exception for Processing Special Categories of Personal Data1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 9(2)(f).https://artifacts.trustmarkinitiative.org/lib/tds/reliance-on-substantial-public-interest-exception-for-processing-special-categories-of-personal-data/1.0/26Reliance on Substantial Public Interest Exception for Processing Special Categories of Personal Data1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 9(2)(g).https://artifacts.trustmarkinitiative.org/lib/tds/reliance-on-healthcare-and-health-management-exception-for-processing-special-categories-of-personal-data/1.0/27Reliance on Healthcare and Health Management Exception for Processing Special Categories of Personal Data1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 9(2)(h).https://artifacts.trustmarkinitiative.org/lib/tds/reliance-on-public-interest-in-public-health-exception-for-processing-special-categories-of-personal-data/1.0/28Reliance on Public Interest in Public Health Exception for Processing Special Categories of Personal Data1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 9(2)(i).https://artifacts.trustmarkinitiative.org/lib/tds/reliance-on-archiving-research-and-statistics-exception-for-processing-special-categories-of-personal-data/1.0/29Reliance on Archiving, Research, and Statistics Exception for Processing Special Categories of Personal Data1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 9(2)(j).https://artifacts.trustmarkinitiative.org/lib/tds/processing-of-criminal-conviction-and-related-data/1.0/30Processing of Criminal Conviction and Related Data1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 10.https://artifacts.trustmarkinitiative.org/lib/tds/transparent-communication-with-data-subjects/1.0/31Transparent Communication with Data Subjects1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 12(1).https://artifacts.trustmarkinitiative.org/lib/tds/facilitation-of-data-subject-rights/1.0/32Facilitation of Data Subject Rights1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 12(2).https://artifacts.trustmarkinitiative.org/lib/tds/timely-response-to-data-subject-requests/1.0/33Timely Response to Data Subject Requests1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 12(3).https://artifacts.trustmarkinitiative.org/lib/tds/duty-to-inform-when-refusing-requests/1.0/34Duty to Inform When Refusing Requests1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 12(4).https://artifacts.trustmarkinitiative.org/lib/tds/charging-fees-for-requests/1.0/35Charging Fees for Requests1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 12(5).https://artifacts.trustmarkinitiative.org/lib/tds/providing-basic-required-information-upon-data-collection/1.0/36Providing Basic Required Information Upon Data Collection1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 13(1).https://artifacts.trustmarkinitiative.org/lib/tds/providing-additional-required-information-upon-data-collection/1.0/37Providing Additional Required Information Upon Data Collection1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 13(2).https://artifacts.trustmarkinitiative.org/lib/tds/providing-basic-required-information-upon-indirect-data-collection/1.0/38Providing Basic Required Information Upon Indirect Data Collection1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 14(1).https://artifacts.trustmarkinitiative.org/lib/tds/providing-additional-required-information-upon-indirect-data-collection/1.0/39Providing Additional Required Information Upon Indirect Data Collection1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 14(2).https://artifacts.trustmarkinitiative.org/lib/tds/providing-timely-information-upon-indirect-collection/1.0/40Providing Timely Information Upon Indirect Collection1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 14(3).https://artifacts.trustmarkinitiative.org/lib/tds/fulfillment-of-data-subject-right-of-access/1.0/41Fulfillment of Data Subject Right of Access1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 15(1).https://artifacts.trustmarkinitiative.org/lib/tds/providing-a-copy-of-personal-data-upon-request/1.0/42Providing a Copy of Personal Data upon Request1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 15(3).https://artifacts.trustmarkinitiative.org/lib/tds/fulfillment-of-the-right-to-rectification-of-personal-data/1.0/43Fulfillment of the Right to Rectification of Personal Data1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 16.https://artifacts.trustmarkinitiative.org/lib/tds/fulfillment-of-the-right-to-erasure-of-personal-data/1.0/44Fulfillment of the Right to Erasure of Personal Data1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 17(1).https://artifacts.trustmarkinitiative.org/lib/tds/communication-of-erasure-request-to-other-controllers/1.0/45Communication of Erasure Request to Other Controllers1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 17(2).https://artifacts.trustmarkinitiative.org/lib/tds/fulfillment-of-the-right-to-restriction-of-processing/1.0/46Fulfillment of the Right to Restriction of Processing1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 18(1).https://artifacts.trustmarkinitiative.org/lib/tds/permitted-processing-during-restriction/1.0/47Permitted Processing During Restriction1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 18(2).https://artifacts.trustmarkinitiative.org/lib/tds/notification-of-recipients-and-disclosure-of-recipient-information-upon-request/1.0/48Notification of Recipients and Disclosure of Recipient Information Upon Request1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 19.https://artifacts.trustmarkinitiative.org/lib/tds/provision-of-personal-data-in-portable-format/1.0/49Provision of Personal Data in Portable Format1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 20(1).https://artifacts.trustmarkinitiative.org/lib/tds/transmission-of-personal-data-to-another-controller/1.0/50Transmission of Personal Data to Another Controller1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 20(2).https://artifacts.trustmarkinitiative.org/lib/tds/fulfillment-of-the-right-to-object-to-legitimate-interest-or-public-task-processing/1.0/51Fulfillment of the Right to Object to Legitimate Interest or Public Task Processing1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 21(1).https://artifacts.trustmarkinitiative.org/lib/tds/fulfillment-of-the-right-to-object-to-direct-marketing/1.0/52Fulfillment of the Right to Object to Direct Marketing1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 21(2).https://artifacts.trustmarkinitiative.org/lib/tds/disclosure-of-the-right-to-object-to-direct-marketing/1.0/53Disclosure of the Right to Object to Direct Marketing1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 21(4).https://artifacts.trustmarkinitiative.org/lib/tds/prohibition-of-solely-automated-decision-making-with-legal-or-similarly-significant-effects/1.0/54Prohibition of Solely Automated Decision-Making with Legal or Similarly Significant Effects1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 22(1).https://artifacts.trustmarkinitiative.org/lib/tds/permissible-conditions-for-solely-automated-decision-making/1.0/55Permissible Conditions for Solely Automated Decision-Making1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 22(2).https://artifacts.trustmarkinitiative.org/lib/tds/implementation-of-safeguards-for-solely-automated-decisions/1.0/56Implementation of Safeguards for Solely Automated Decisions1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 22(3).https://artifacts.trustmarkinitiative.org/lib/tds/establishment-and-demonstration-of-gdpr-compliance-measures/1.0/57Establishment and Demonstration of GDPR Compliance Measures1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 24(1).https://artifacts.trustmarkinitiative.org/lib/tds/adoption-of-internal-policies-for-gdpr-compliance/1.0/58Adoption of Internal Policies for GDPR Compliance1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 24(2).https://artifacts.trustmarkinitiative.org/lib/tds/implementation-of-data-protection-by-design/1.0/59Implementation of Data Protection by Design1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 25(1).https://artifacts.trustmarkinitiative.org/lib/tds/implementation-of-data-protection-by-default/1.0/60Implementation of Data Protection by Default1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 25(2).https://artifacts.trustmarkinitiative.org/lib/tds/establishment-of-transparent-joint-controller-arrangements/1.0/61Establishment of Transparent Joint Controller Arrangements1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 26(1).https://artifacts.trustmarkinitiative.org/lib/tds/disclosure-of-the-essence-of-joint-controller-arrangement/1.0/62Disclosure of the Essence of Joint Controller Arrangement1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 26(2).https://artifacts.trustmarkinitiative.org/lib/tds/appointment-of-eu-representative-by-non-eu-entities/1.0/63Appointment of EU Representative by Non-EU Entities1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 27(1).https://artifacts.trustmarkinitiative.org/lib/tds/availability-of-the-eu-representative-to-supervisory-authorities-and-data-subjects/1.0/64Availability of the EU Representative to Supervisory Authorities and Data Subjects1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 27(3).https://artifacts.trustmarkinitiative.org/lib/tds/engagement-of-processors-providing-sufficient-guarantees/1.0/65Engagement of Processors Providing Sufficient Guarantees1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 28(1).https://artifacts.trustmarkinitiative.org/lib/tds/use-of-sub-processors-only-with-written-authorization/1.0/66Use of Sub-Processors Only with Written Authorization1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 28(2).https://artifacts.trustmarkinitiative.org/lib/tds/execution-of-processing-contract-with-required-provisions/1.0/67Execution of Processing Contract with Required Provisions1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 28(3).https://artifacts.trustmarkinitiative.org/lib/tds/restriction-of-processing-to-documented-instructions/1.0/68Restriction of Processing to Documented Instructions1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 29.https://artifacts.trustmarkinitiative.org/lib/tds/maintenance-of-records-of-processing-activities-by-the-data-controller/1.0/69Maintenance of Records of Processing Activities by the Data Controller1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 30(1).https://artifacts.trustmarkinitiative.org/lib/tds/cooperation-with-the-supervisory-authority/1.0/70Cooperation with the Supervisory Authority1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 31.https://artifacts.trustmarkinitiative.org/lib/tds/implementation-of-appropriate-security-measures/1.0/71Implementation of Appropriate Security Measures1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 32(1).https://artifacts.trustmarkinitiative.org/lib/tds/notification-of-personal-data-breach-to-the-supervisory-authority/1.0/72Notification of Personal Data Breach to the Supervisory Authority1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 33(1).https://artifacts.trustmarkinitiative.org/lib/tds/communication-of-high-risk-personal-data-breach-to-the-data-subject/1.0/73Communication of High-Risk Personal Data Breach to the Data Subject1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 34(1).https://artifacts.trustmarkinitiative.org/lib/tds/performance-of-a-dpia-prior-to-high-risk-processing/1.0/74Performance of a DPIA Prior to High-Risk Processing1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 35(1).https://artifacts.trustmarkinitiative.org/lib/tds/consultation-of-the-data-protection-officer-in-the-dpia-process/1.0/75Consultation of the Data Protection Officer in the DPIA Process1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 35(2).https://artifacts.trustmarkinitiative.org/lib/tds/minimum-content-requirements-for-a-dpia/1.0/76Minimum Content Requirements for a DPIA1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 35(7).https://artifacts.trustmarkinitiative.org/lib/tds/prior-consultation-with-the-supervisory-authority-when-necessary/1.0/77Prior Consultation with the Supervisory Authority When Necessary1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 35(9).https://artifacts.trustmarkinitiative.org/lib/tds/prior-consultation-with-the-supervisory-authority-based-on-dpia-outcome/1.0/78Prior Consultation with the Supervisory Authority Based on DPIA Outcome1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 36(1).https://artifacts.trustmarkinitiative.org/lib/tds/submission-of-dpia-and-supporting-information-during-consultation/1.0/79Submission of DPIA and Supporting Information During Consultation1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 36(3).https://artifacts.trustmarkinitiative.org/lib/tds/designation-of-a-data-protection-officer-under-specified-conditions/1.0/80Designation of a Data Protection Officer Under Specified Conditions1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 37(1).https://artifacts.trustmarkinitiative.org/lib/tds/designation-of-the-data-protection-officer-based-on-expertise-and-professional-qualities/1.0/81Designation of the Data Protection Officer Based on Expertise and Professional Qualities1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 37(5).https://artifacts.trustmarkinitiative.org/lib/tds/public-communication-and-supervisory-authority-notification-of-the-data-protection-officer/1.0/82Public Communication and Supervisory Authority Notification of the Data Protection Officer1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 37(7).https://artifacts.trustmarkinitiative.org/lib/tds/involvement-of-the-data-protection-officer-in-all-data-protection-matters/1.0/83Involvement of the Data Protection Officer in All Data Protection Matters1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 38(1).https://artifacts.trustmarkinitiative.org/lib/tds/support-for-the-data-protection-officer_s-tasks/1.0/84Support for the Data Protection Officer's Tasks1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 38(2).https://artifacts.trustmarkinitiative.org/lib/tds/safeguards-for-the-independence-and-non-penalization-of-the-data-protection-officer/1.0/85Safeguards for the Independence and Non-Penalization of the Data Protection Officer1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 38(3).https://artifacts.trustmarkinitiative.org/lib/tds/definition-and-support-of-data-protection-officer-responsibilities/1.0/86Definition and Support of Data Protection Officer Responsibilities1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 39(1).https://artifacts.trustmarkinitiative.org/lib/tds/adherence-to-approved-codes-of-conduct-with-monitoring/1.0/87Adherence to Approved Codes of Conduct with Monitoring1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 40(4).https://artifacts.trustmarkinitiative.org/lib/tds/compliance-with-accredited-monitoring-body-for-codes-of-conduct/1.0/88Compliance with Accredited Monitoring Body for Codes of Conduct1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 41(4).https://artifacts.trustmarkinitiative.org/lib/tds/cooperation-with-certification-bodies/1.0/89Cooperation with Certification Bodies1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 42(3).https://artifacts.trustmarkinitiative.org/lib/tds/compliance-with-gdpr-requirements-for-international-data-transfers/1.0/90Compliance with GDPR Requirements for International Data Transfers1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 44.https://artifacts.trustmarkinitiative.org/lib/tds/reliance-on-adequacy-decisions-for-data-transfers/1.0/91Reliance on Adequacy Decisions for Data Transfers1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 45(1).https://artifacts.trustmarkinitiative.org/lib/tds/implementation-of-appropriate-safeguards-for-international-transfers/1.0/92Implementation of Appropriate Safeguards for International Transfers1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 46(1).https://artifacts.trustmarkinitiative.org/lib/tds/use-of-approved-binding-corporate-rules-for-group-transfers/1.0/93Use of Approved Binding Corporate Rules for Group Transfers1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 47(1).https://artifacts.trustmarkinitiative.org/lib/tds/restriction-on-third-country-access-without-eu-legal-authorization/1.0/94Restriction on Third-Country Access Without EU Legal Authorization1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 48.https://artifacts.trustmarkinitiative.org/lib/tds/use-of-derogations-for-international-data-transfers-without-safeguards/1.0/95Use of Derogations for International Data Transfers Without Safeguards1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 49(1).https://artifacts.trustmarkinitiative.org/lib/tds/liability-for-gdpr-violations-causing-damage/1.0/96Liability for GDPR Violations Causing Damage1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 82(2)-(3).https://artifacts.trustmarkinitiative.org/lib/tds/accountability-for-compliance-with-the-gdpr-subject-to-fines/1.0/97Accountability for Compliance with the GDPR, Subject to Fines1.0Specifies requirements in accordance with General Data Protection Regulation (GDPR) Art. 83(2)-(6).GDPRGeneral Data Protection Regulation (GDPR) (EU) 2016/679, as published in the Official Journal of the European Union (OJ L 119, 4.5.2016, p. 1-88).