// Level 3 · Controls
Chapter 1: General provisions
General provisions
Art. 1Medium
Subject-matter and objectives
Sets the purpose: protect natural persons regarding personal data and free movement of such data.
Art. 2Medium
Material scope
Applies to processing of personal data wholly or partly by automated means, and to non-automated processing forming part of a filing system.
Art. 3Medium
Territorial scope
Applies to controllers/processors established in the EU and to those targeting/monitoring EU data subjects.
Art. 4Medium
Definitions
Defines key terms: personal data, processing, controller, processor, consent, profiling, pseudonymisation, etc.