Article 40 of the GDPR (General Data Protection Regulation).

(3) Data controllers and processors who are not subject to the territorial scope of the GDPR. The focus on a specific sector is intended to provide a cost-effective way to comply with data protection regulations, taking into account all the specific characteristics of data processing that occurs within that sector, with particular attention to the needs of micro, small, and medium-sized enterprises. EDPB, ‘Guidelines 1/2019 on Codes of Conduct and Supervisory Authorities under Regulation 2016/679’, June 4, 2019 (version 2.0), footnote 11 (available at [https://www.edpb.europa.eu/sites/default/files/files/file1/edpb_guidelines_201901_v2.0_codesofconduct_en.pdf]). It is important to remember that, according to [[Article 24 GDPR|Article 24(3) GDPR]], compliance with an approved code of conduct can be used as an element to demonstrate compliance with the GDPR. See the explanation accompanying [[Article 24 GDPR]]. The focus on a specific sector is intended to provide a cost-effective way to comply with the requirements of data protection regulations.

This content has been automatically translated using machine translation. The original version is available in the source language.

This content was automatically translated using machine translation. The original version is available in the source language.