Article 40. Codes of Conduct

1. The member states, the supervisory authorities, the board and the commission shall encourage the drawing up of codes of conduct intended to contribute to the proper application of this regulation, taking account of the specific features of the various processing sectors,

and the specific needs of micro, small and medium-sized enterprises.

2. Associations and other bodies representing categories of controllers or processors may

prepare codes of conduct, or amend or extend such codes, for the purpose of

specifying the application of this regulation,

such as with regard to. A, fair and transparent processing. B, the legitimate interest pursued

by controllers in specific contexts. C, the collection of personal data. D, the pseudonymization of

personal data. E. The information provided to

the public and did data subjects. F, the exercise of the rights of data subjects. G, the information

provided to and the protection of children, and the manner in which the consent of the holders of

parental responsibility over children

is to be obtained.

H.

the measures and procedures referred to in Articles 24 and 25 in the measures to ensure security

of processing referred to in Article 32.

I, the notification of personal data breaches to supervisory authorities and the communication of

such personal data breaches to data subjects.

J.

The transfer of personal data to third countries or international organizations, or

K, out-of-court proceedings and other dispute resolution procedures for resolving disputes

between controllers and data subjects with regard to processing, without prejudice to the rights of data subjects pursuant to Article 77 and 79.

...