EU regulatory register · GDPR
Article 40Codes of conduct
CELEX 32016R0679 · Read on 2026-08-18 · Chapter IV
Official text
Read from the EU Publications Office for this CELEX number. The wording stands as published; nothing here is rewritten or summarised.
1. The Member States, the supervisory authorities, the Board and the Commission shall encourage the drawing up of codes of conduct intended to contribute to the proper application of this Regulation, taking account of the specific features of the various processing sectors and the specific needs of micro, small and medium-sized enterprises.
2. Associations and other bodies representing categories of controllers or processors may prepare codes of conduct, or amend or extend such codes, for the purpose of specifying the application of this Regulation, such as with regard to:
(a)
fair and transparent processing;
(b)
the legitimate interests pursued by controllers in specific contexts;
(c)
the collection of personal data;
(d)
the pseudonymisation of personal data;
(e)
the information provided to the public and to data subjects;
(f)
the exercise of the rights of data subjects;
The article continues in the official text.
Other articles in this chapter
The text is quoted from the official source and is not legal advice. A national court reads the language version that binds in its jurisdiction.
Verifiable trust signals
- Six fixed blocks, one source per line
- No sentence written by a language model
- Engine version and read date on every answer
- No customer data, no documents, no advice
- Model card and audit published under the EU AI Act