About the GDPR Navigator
What it is
The GDPR Navigator publishes the text of the General Data Protection Regulation (Regulation (EU) 2016/679) in English, one page per article and per recital, with an address for every numbered paragraph and point (for example Article 6(4)(a)). It is published by DPO School as a study and reference aid. It is reference material, not legal advice.
Source and licence
The articles are taken from the consolidated text published by the Publications Office of the European Union (02016R0679-20160504), which incorporates the corrigendum published in OJ L 127, 23.5.2018, p. 2. The recitals are taken from the Official Journal text (OJ L 119, 4.5.2016, p. 1), with recital 71 as corrected by the same corrigendum. Chapters and sections follow the official text.
Only the text published in the Official Journal of the European Union is authentic. Official text: EUR-Lex (ELI http://data.europa.eu/eli/reg/2016/679/oj).
© European Union, https://eur-lex.europa.eu. The text is reused under the EUR-Lex legal notice, which allows reuse provided the source is acknowledged.
How it is kept up to date
The text is imported from the official files by a script, and automated tests compare it word by word with those files. Each page states the date on which the official files were retrieved (text as of 28 october 2026). To bring the text up to date after an amendment or a correction, the files are retrieved again and the pages are rebuilt, and that date changes.
Summaries and related recitals
Some articles carry a short summary in plain language, marked "Summary (not the official text)". Summaries are written by DPO School from the article's own text, are not part of the Regulation and may leave out detail; the official text prevails. Where an article could not be summarised faithfully in one or two sentences, no summary is given.
The lists of related recitals and related articles are under review.
Judgments, guidance and fines
Judgments of the Court of Justice, EDPB guidance and fines imposed by supervisory authorities were each checked against an official source (the Court's CURIA and EUR-Lex records, the EDPB document register, and the authorities' own decisions or announcements) on 28 October 2026. Every item links to its source. Holdings and one-line descriptions are written by DPO School and are not the official text. Fines are shown in the currency in which they were imposed, without conversion.
Review and method
The content of every article, recital, judgment, guidance and fine page was reviewed by Sergio Maldonado Elvira on 29 October 2026.
Sergio Maldonado Elvira
JD, LLM, FIP, CIPT, CIPP/E, CIPP/US
Principal Attorney, North End Law
Sergio Maldonado Elvira has been admitted in California, Spain, and England & Wales.
- Attorney, State Bar of California (since 2026)
- Abogado, ICAM, Spain (since 1998)
- Solicitor, Law Society of England & Wales (2003-2007)
How it was verified: the text of the Regulation was taken from the official files on EUR-Lex. Each judgment was checked against the Court of Justice's own record on CURIA and the judgment on EUR-Lex; each guidance document against the EDPB document register; and each fine against the supervisory authority's own decision or announcement. Text as of 28 October 2026; reviewed on 29 October 2026.
This is reference material, not legal advice.
Reading it by machine
Every article and recital is also available as JSON, with its structure, source and dates:
- Index: https://dposchool.com/gdpr/api/v1/index.json
- Article 6: https://dposchool.com/gdpr/api/v1/articles/6.json
- Recital 47: https://dposchool.com/gdpr/api/v1/recitals/47.json
- Summary for language models: https://dposchool.com/gdpr/llms.txt