Chapter 2 Obligations of Data Fiduciary
| Article 4 | – | Grounds for processing personal data |
| Article 5 | – | Notice |
| Article 6 | – | Consent |
| Article 7 | – | Certain legitimate uses |
| Article 8 | – | General obligations of Data Fiduciary |
| Article 9 | – | Processing of personal data of children |
| Article 10 | – | Additional obligations of Significant Data Fiduciary |