# Article 40 of the GDPR (General Data Protection Regulation).

- Type: News
- Source: GDPRhub
- Date: 2026-01-05
- Canonical: https://overview.legal/posts/51997
- Topics: Codes of Conduct, Controllers, Processors, Processing, Data Processor, Profiling, Data Controller, Supervision, Pseudonymization

## Summary

Commentary: Codes of Conduct (CoCs) are voluntary instruments that establish specific data protection rules for certain categories of controllers and processors. In other words, a CoC can serve as a guide for a group of controllers and processors, outlining how a processing activity that complies with the GDPR looks in a specific processing situation. <ref>EDPB, 'Guidelines 1/2019 on Codes of Conduct and Supervisory Authorities under Regulation 2016/679', June 4, 2019 (version 2.0), footnote 7 (available at [https://www.

## Full text

Commentary: Codes of conduct (CoCs) are voluntary instruments that establish specific data protection rules for certain categories of controllers and processors. In other words, a code of conduct can serve as a kind of guide for a group of controllers and processors, describing how a processing activity that complies with the GDPR looks in a specific situation. <ref>EDPB, ‘Guidelines 1/2019 on codes of conduct and supervisory authorities pursuant to Regulation 2016/679’, 4 June 2019 (version 2.0), footnote 7 (available at [https://www.edpb.europa.eu/sites/default/files/files/file1/edpb_guidelines_201901_v2.0_codesofconduct_en.pdf]).</ref> Codes of conduct are voluntary instruments that establish specific data protection rules for certain categories of controllers and processors. In other words, a code of conduct can serve as a kind of guide for a group of controllers and processors, describing how a processing activity that complies with the GDPR looks in a specific situation. <ref>EDPB, ‘Guidelines 1/2019 on codes of conduct and supervisory authorities. --- *This content has been automatically translated using machine translation. The original version is available in the source language.* --- *This content was automatically translated using machine translation. The original version is available in the source language.*

## Cited law provisions (1)

### GDPR — gdpr-art-40-en

Codes of conduct

---
Generated by overview.legal · https://overview.legal/posts/51997 · 2026-08-22