← back to the act's dossier

GDPR — Article 2

The article's text

Article 2 Material scope 1. This Regulation applies to the processing of personal data wholly or partly by automated means and to the processing other than by automated means of personal data which form part of a filing system or are intended to form part of a filing system. 2. This Regulation does not apply to the processing of personal data: (a) in the course of an activity which falls outside the scope of Union law; (b) by the Member States when carrying out activities which fall within the scope of Chapter 2 of Title V of the TEU; (c) by a natural person in the course of a purely personal or household activity; (d) by competent authorities for the purposes of the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties, including the safeguarding against and the prevention of threats to public security. execution of criminal penalties, including the safeguarding against and the prevention of threats to public security. 3. For the processing of personal data by the Union institutions, bodies, offices and agencies, Regulation (EC) No 45/2001 applies. Regulation (EC) No 45/2001 and other Union legal acts applicable to such
full text
processing of personal data shall be adapted to the principles and rules of this Regulation in accordance with Article 98. 4. This Regulation shall be without prejudice to the application of Directive 2000/31/EC, in particular of the liability rules of intermediary service providers in Articles 12 to 15 of that Directive.

Who wrote about this article in the consultations

Filers who named this exact article number in their own text. It is their sentence, not our reading — and not a causal claim.

4
business association
4
EU citizen
4
NGO
2
other
2
company
WhoCountryWhat they wrote
Selbstregulierung Informationswirtschaft e.V. (SRIW)DEof a smart home gadget. Data holders might disclose personal data of family members based on the household exemption in the GDPR (Art. 2.2 (c) GDPR), yet the Data Act fails to address this specific scenario. Additionally, the Data Act does not specify whether
European Centre for Certification and Privacy (ECCP)LUto avoid any risks that World Trade Organisation (WTO) member states challenge the GDPR as a protectionist mechanism in breach of Article 2 of the WTO Agreement on Technical Barriers to Trade (TBT), stating that “technical regulations shall not be more trade-r
Confederation of Swedish EnterpriseSEthe GDPR often proves tricky for many companies processing personal data. The concepts of controller and processor are defined in Art. 2 GDPR, and joint controllership is regulated in Art. 26 GDPR.
Valerian JennyDEIch möchte in meiner Rückmeldung die sogenannte Haushaltsausnahme (Art 2 Abs. 2 lit. c) DSGVO ansprechen. Ich bin der Meinung, dass diese in der Praxis deutlich zu eng ausgelegt wird. Damit wird die DSGVO manchmal zum Mittel, mit dem Mitbürgerinnen und Mitbürg
BundesrechtsanwaltskammerDEnal fundamental rights under Art. 6 (1) sentence 1, (3) lit. c ECHR, Art. 47 (1), 2 sentence 2 CFR, Art. 20 (3), Art. 103 (1) GG, Art. 2 (1) in conjunction with Art. 1 (1) GG in conjunction with Art. 1 (1) GG, Art. 8 (1) ECHR, Art. 7 CFR, Art. 12 (1) GG. It pr
Hessischer LandtagDETätigkeiten aus dem sachlichen Anwendungsbereich der DSGVO im Sinne des Art. 2 Abs. 2 lit. a DSGVO herausfallen. Erwägungsgrund 16 mit vorgeschlagener Einfügung (in blau): 1Diese Verordnung gilt nicht für Fragen des Schutzes von Grundrechten und Grundfreiheite
DE7) Satz 7 den Begriff der "Direktwerbung", ohne ihn näher zu definieren. Das umfasst nach allgemeinem Verständnis in Anlehnung an Art. 2 lit. a RL 2006/114/EG kommerzielle Werbung, die mit der Förderung des Absatzes von Waren oder Dienstleistungen zusammenhäng
Deutsche Industrie- und Handelskammer (DIHK) / German Chamber of Commerce and IndustryDEkungen auf sämtliche Unternehmen haben, die grenzüberschrei­ tend in der EU tätig sind. 1. Kapitel I – Allgemeine Bestimmungen In Art. 2 (Begriffsbestimmungen) sollte eine Definition auch für Beschwerdeführer und die von Ihnen vertretene Organisationen dahinge
Hans-Hermann SchildDEpassiert, Fristbeginn der auf den Freitag folgende Samstag ist, denn der Samstag ist ein Werk- tag. Dies entspricht § 187 BGB und Art. 2 Abs. 3 Verordnung (EWG, EURATOM) Nr. 1182/71 des Rates vom 3. Juni 1971 zur Festlegung der Regeln für die Fristen, Daten un
noybATn, which seem to have many common features with GDPR procedures. Concept 1: Scope is limited to international cooperation of SAs (Article 2 of the Draft Regulation) The Regulation shall be limited to cross-country procedures. This ensures that national cases,
Border Violence Monitoring NetworkDEdeed, the EUDPR provides controllers and processors with many ways to avoid scrutiny in the name of public security and interest. Article 2 sets out that the Regulation does not apply to uses by competent authorities “for the purposes of safeguarding against a
Access Now EuropeFRcurrent practices under the GDPR, June 2022. https://www.accessnow.org/cms/assets/uploads/2022/07/GDPR-Complaint-study.pdf 16 See Article 2-undecies (Limitazioni ai diritti dell'interessato), Capo III, Codice in materia di protezione dei dati personali. https:
Information Technology and Innovation Foundation (ITIF)USof Article 2(2)(a) and Article 2(2)(d) reflecting the Union’s allocation of competence stated in Article 4(2) TEU. 28. Case 311/18 Data Protection Commissioner v Facebook Ireland Limited, Maximillian Schrems with others [2019] EU:C:2019:1145, Opinion of AG Sau
BVPA Bundesverband professioneller Bildanbieter e.V.DEelbar anwendbar, in denen die DSGVO nicht eingreiR, z.B. bei Fotos von Toten, oder bei Fotos im Bereich der Haushaltsaufnahme des Art. 2 Abs. 2c) DSGVO.10 Prak4sch gesehen wendet aber die Rechtsprechung die bislang ergangene Rechtsprechung zum KUG, das sog. ab
Computer & Communication Industry Association (CCIA)USto amend Decision 2016/2297 so that model clauses may be used by controllers established outside the European Union. We note that Article 2 and Clauses 9 and 11 of Decision 206/2297 currently restrict the use of model clauses to ‘data exporters’/controllers es
Federation of German Consumer Associations (Verbraucherzentrale Bundesverband e.V. - vzbv)DEor household activity:  Retraction of the complete exemption of invasive data processing from the material scope of the GDPR in Art. 2(2)(c); instead risk-adequate differentiation also in the con- text of personal or household activity; complete exemption fr
Deutsche Telekom AGDEy 2020 Solution: The definition of processing provided in Article 4 (2) GDPR is the same as the definition of processing given in Article 2 (b) of Directive 95/46 EC. The European Data Protection Board should make clear that an anonymization which was permitte
Joanna StrycharzNLen designed to regulate the (data- processing) operations of governmental and commercial institutions23. The household exception (Art.2(2)c) is very limited in scope.24 The result is that very often, individuals might be considered data controllers in their ow

Source: public consultation submissions and position papers. n = 18 mentions; counted as a literal reference to the article number.

Ask about this article →