Back to Module
8 of 18|History of Data Protection
reading 25 min•GDPR Journey
Important Articles
A deep dive into the most critical articles of the GDPR.
🎯 Learning Objectives
- ▸ Identify the core principles in Article 5
- ▸ Understand the lawful bases in Article 6
- ▸ Know the rights in Articles 15-22
The Core Obligations
- • Article 5: Principles (lawfulness, fairness, transparency, etc.)
- • Article 6: Lawful bases for processing (consent, contract, legal obligation, etc.)
- • Article 7: Conditions for consent (must be freely given, clear, easy to withdraw)
- • Article 13 & 14: Transparent information and privacy notices.
- • Article 17: Right to Erasure ("Right to be Forgotten")
- • Article 32: Security of Processing
- • Article 33: Breach notification (72 hours)
Impact on India
India's DPDPA borrows heavily from these concepts. Article 6 mirrors Section 6 (Consent) and 7 (Legitimate Uses) of the DPDPA. Article 32 mirrors Section 8(5) of the DPDPA. However, DPDPA is much shorter (44 sections) compared to GDPR (99 articles).
📖 Glossary
- Right to be Forgotten
- The right of individuals to have their personal data erased by search engines and data controllers under certain conditions.
🔑 Key Takeaways
- Article 5 sets out the 7 principles of processing.
- Article 17 is the "Right to be Forgotten."
- Article 32 covers security of processing.
📚 Further Reading
- Key GDPR Articles — EDPB (2018)
Course Author
Shilpi Kulshrestha
Shilpi is a corporate lawyer with over a decade of experience in data protection, company law, and regulatory compliance. She has advised 50+ startups and enterprises on DPDPA readiness, privacy gover...