News · GDPRhub EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

Article 40 of the GDPR (General Data Protection Regulation).

Codes of Conduct Controllers Processors Processing Data Processor Profiling Data Controller Supervision
Jan 5, 2026
Summary

Commentary: Codes of Conduct (CoCs) are voluntary instruments that establish specific data protection rules for certain categories of controllers and processors. In other words, a CoC can serve as a guide for a group of controllers and processors, outlining how a processing activity that complies with the GDPR looks in a specific processing situation. <ref>EDPB, 'Guidelines 1/2019 on Codes of Conduct and Supervisory Authorities under Regulation 2016/679', June 4, 2019 (version 2.0), footnote 7 (available at [https://www.

How it connects

References

Related across sources

Literature The data subject’s right to access to information under GDPR and the right of the data controller to protect its know-how Przegląd Prawniczy Uniwersytetu im. Adam Mickiewicza Case Law VB v Natsionalna agentsia za prihodite CJEU Case Law Deutsche Wohnen SE v Staatsanwaltschaft Berlin CJEU Guidance Guidelines 07/2022 on certification as a tool for transfers EDPB Guidance Guidelines 04/2021 on Codes of Conduct as tools for transfers EDPB Literature General Data Protection Regulation (GDPR) ambiguity, national diversity and data protection officer certification: Implementing Art. 39(1) GDPR in France, Italy, Luxembourg and Spain Journal of Data Protection Privacy

Full text

Commentary: Codes of conduct (CoCs) are voluntary instruments that establish specific data protection rules for certain categories of controllers and processors. In other words, a code of conduct can serve as a kind of guide for a group of controllers and processors, describing how a processing activity that complies with the GDPR looks in a specific situation. EDPB, ‘Guidelines 1/2019 on codes of conduct and supervisory authorities pursuant to Regulation 2016/679’, 4 June 2019 (version 2.0), footnote 7 (available at [https://www.edpb.europa.eu/sites/default/files/files/file1/edpb_guidelines_201901_v2.0_codesofconduct_en.pdf]). Codes of conduct are voluntary instruments that establish specific data protection rules for certain categories of controllers and processors. In other words, a code of conduct can serve as a kind of guide for a group of controllers and processors, describing how a processing activity that complies with the GDPR looks in a specific situation. EDPB, ‘Guidelines 1/2019 on codes of conduct and supervisory authorities. --- This content has been automatically translated using machine translation. The original version is available in the source language. --- This content was automatically translated using machine translation. The original version is available in the source language.

Similar Content