The 171 Recitals of the General Data Protection Regulation explain the intention behind each provision of the GDPR. They are not legally binding in the same way as the Articles, but courts and data protection authorities regularly refer to them when interpreting the GDPR’s requirements. Understanding the relevant Recitals is essential for compliance professionals, legal practitioners, and businesses seeking to apply the GDPR correctly. This page provides the full text of all 171 Recitals, each cross-referenced to the GDPR Articles they explain.

GDPR Rectial No. 1
Data Protection as a Fundamental Right*
GDPR Rectial No. 2
Respect of the Fundamental Rights and Freedoms*
GDPR Rectial No. 3
Directive 95/46/EC Harmonisation*
GDPR Rectial No. 4
Data Protection in Balance with Other Fundamental Rights*
GDPR Rectial No. 5
Cooperation Between Member States to Exchange Personal Data*
GDPR Rectial No. 6
Ensuring a High Level of Data Protection Despite the Increased Exchange of Data*
GDPR Rectial No. 7
The Framework is Based on Control and Certainty*
GDPR Rectial No. 8
Adoption into National Law*
GDPR Rectial No. 9
Different Standards of Protection by the Directive 95/46/EC*
GDPR Rectial No. 10
Harmonised Level of Data Protection Despite National Scope*
GDPR Rectial No. 11
Harmonisation of the Powers and Sanctions*
GDPR Rectial No. 12
Authorization of the European Parliament and the Council*
GDPR Rectial No. 13
Taking Account of Micro, Small and Medium-Sized Enterprises*
GDPR Rectial No. 14
Not Applicable to Legal Persons*
GDPR Rectial No. 15
Technology Neutrality*
GDPR Rectial No. 16
Not Applicable to Activities Regarding National and Common Security*
GDPR Rectial No. 17
Adaptation of Regulation (EC) No 45/2001*
GDPR Rectial No. 18
Not Applicable to Personal or Household Activities*
GDPR Rectial No. 19
Not Applicable to Criminal Prosecution*
GDPR Rectial No. 20
Respecting the Independence of the Judiciary*
GDPR Rectial No. 21
Liability Rules of Intermediary Service Providers Shall Remain Unaffected*
GDPR Rectial No. 22
Processing by an Establishment*
GDPR Rectial No. 23
Applicable to Controllers/Processors Not Established in the Union if Data Subjects Within the Union are Targeted*
GDPR Rectial No. 24
Applicable to Controllers/Processors Not Established in the Union if Data Subjects Within the Union are Profiled*
GDPR Rectial No. 25
Applicable to Controllers Due to International Law*
GDPR Rectial No. 26
Not Applicable to Anonymous Data*
GDPR Rectial No. 27
Not Applicable to Data of Deceased Persons*
GDPR Rectial No. 28
Introduction of Pseudonymisation*
GDPR Rectial No. 29
Pseudonymisation at the Same Controller*
GDPR Rectial No. 30
Online Identifiers for Profiling and Identification*
GDPR Rectial No. 31
Not Applicable to Public Authorities in Connection with Their Official Tasks*
GDPR Rectial No. 32
Conditions for Consent*
GDPR Rectial No. 33
Consent to Certain Areas of Scientific Research*
GDPR Rectial No. 34
Genetic Data*
GDPR Rectial No. 35
Health Data*
GDPR Rectial No. 36
Determination of the Main Establishment*
GDPR Rectial No. 37
Group of undertakings*
GDPR Rectial No. 38
Special Protection of Children’s Personal Data*
GDPR Rectial No. 39
Principles of Data Processing*
GDPR Rectial No. 40
Lawfulness of Data Processing*
GDPR Rectial No. 41
Legal Basis or Legislative Measures*
GDPR Rectial No. 42
Burden of Proof and Requirements for Consent*
GDPR Rectial No. 43
Freely Given Consent*
GDPR Rectial No. 44
Performance of a Contract*
GDPR Rectial No. 45
Fulfillment of Legal Obligations*
GDPR Rectial No. 46
Vital Interests of the Data Subject*
GDPR Rectial No. 47
Overriding Legitimate Interest*
GDPR Rectial No. 48
Overriding Legitimate Interest Within Group of Undertakings*
GDPR Rectial No. 49
Network and Information Security as Overriding Legitimate Interest*
GDPR Rectial No. 50
Further Processing of Personal Data*
GDPR Rectial No. 51
Protecting Sensitive Personal Data*
GDPR Rectial No. 52
Exceptions to the Prohibition on Processing Special Categories of Personal Data*
GDPR Rectial No. 53
Processing of Sensitive Data in Health and Social Sector*
GDPR Rectial No. 54
Processing of Sensitive Data in Public Health Sector*
GDPR Rectial No. 55
Public Interest in Processing by Official Authorities for Objectives of Recognized Religious Communities*
GDPR Rectial No. 56
Processing Personal Data on People’s Political Opinions by Parties*
GDPR Rectial No. 57
Additional Data for Identification Purposes*
GDPR Rectial No. 58
The Principle of Transparency*
GDPR Rectial No. 59
Procedures for the Exercise of the Rights of the Data Subjects*
GDPR Rectial No. 60
Information Obligation*
GDPR Rectial No. 61
Time of Information*
GDPR Rectial No. 62
Exceptions to the Obligation to Provide Information*
GDPR Rectial No. 63
Right of Access*
GDPR Rectial No. 64
Identity Verification*
GDPR Rectial No. 65
Right of Rectification and Erasure*
GDPR Rectial No. 66
Right to be Forgotten*
GDPR Rectial No. 67
Restriction of Processing*
GDPR Rectial No. 68
Right of Data Portability*
GDPR Rectial No. 69
Right to Object*
GDPR Rectial No. 70
Right to Object to Direct Marketing*
GDPR Rectial No. 71
Profiling*
GDPR Rectial No. 72
Guidance of the European Data Protection Board Regarding Profiling*
GDPR Rectial No. 73
Restrictions of Rights and Principles*
GDPR Rectial No. 74
Responsibility and Liability of the Controller*
GDPR Rectial No. 75
Risks to the Rights and Freedoms of Natural Persons*
GDPR Rectial No. 76
Risk Assessment*
GDPR Rectial No. 77
Risk Assessment Guidelines*
GDPR Rectial No. 78
Appropriate Technical and Organisational Measures*
GDPR Rectial No. 79
Allocation of the Responsibilities*
GDPR Rectial No. 80
Designation of a Representative*
GDPR Rectial No. 81
The Use of Processors*
GDPR Rectial No. 82
Record of Processing Activities*
GDPR Rectial No. 83
Security of Processing*
GDPR Rectial No. 84
Risk Evaluation and Impact Assessment*
GDPR Rectial No. 85
Notification Obligation of Breaches to the Supervisory Authority*
GDPR Rectial No. 86
Notification of Data Subjects in Case of Data Breaches*
GDPR Rectial No. 87
Promptness of Reporting / Notification*
GDPR Rectial No. 88
Format and Procedures of the Notification*
GDPR Rectial No. 89
Elimination of the General Reporting Requirement*
GDPR Rectial No. 90
Data Protection Impact Assessement*
GDPR Rectial No. 91
Necessity of a Data Protection Impact Assessment*
GDPR Rectial No. 92
Broader Data Protection Impact Assessment*
GDPR Rectial No. 93
Data Protection Impact Assessment at Authorities*
GDPR Rectial No. 94
Consultation of the Supervisory Authority*
GDPR Rectial No. 95
Support by the Processor*
GDPR Rectial No. 96
Consultation of the Supervisory Authority in the Course of a Legislative Process*
GDPR Rectial No. 97
Data Protection Officer*
GDPR Rectial No. 98
Preparation of Codes of Conduct by Organisations and Associations*
GDPR Rectial No. 99
Consultation of Stakeholders and Data Subjects in the Development of Codes of Conduct*
GDPR Rectial No. 100
Certification*
GDPR Rectial No. 101
General Principles for International Data Transfers*
GDPR Rectial No. 102
International Agreements for an Appropriate Level of Data Protection*
GDPR Rectial No. 103
Appropriate Level of Data Protection Based on an Adequacy Decision*
GDPR Rectial No. 104
Criteria for an Adequacy Decision*
GDPR Rectial No. 105
Consideration of International Agreements for an Adequacy Decision*
GDPR Rectial No. 106
Monitoring and Periodic Review of the Level of Data Protection*
GDPR Rectial No. 107
Amendment, Revocation and Suspension of Adequacy Decisions*
GDPR Rectial No. 108
Appropriate Safeguards*
GDPR Rectial No. 109
Standard Data Protection Clauses*
GDPR Rectial No. 110
Binding Corporate Rules*
GDPR Rectial No. 111
Exceptions for Certain Cases of International Transfers*
GDPR Rectial No. 112
Data Transfers due to Important Reasons of Public Interest*
GDPR Rectial No. 113
Transfers Qualified as Not Repetitive and that Only Concern a Limited Number of Data Subjects*
GDPR Rectial No. 114
Safeguarding of Enforceability of Rights and Obligations in the Absence of an Adequacy Decision*
GDPR Rectial No. 115
Rules in Third Countries Contrary to the Regulation*
GDPR Rectial No. 116
Cooperation Among Supervisory Authorities*
GDPR Rectial No. 117
Establishment of Supervisory Authorities*
GDPR Rectial No. 118
Monitoring of the Supervisory Authorities*
GDPR Rectial No. 119
Organisation of Several Supervisory Authorities of a Member State*
GDPR Rectial No. 120
Features of Supervisory Authorities*
GDPR Rectial No. 121
Independence of the Supervisory Authorities*
GDPR Rectial No. 122
Responsibility of the Supervisory Authorities*
GDPR Rectial No. 123
Cooperation of the Supervisory Authorities with Each Other and with the Commission*
GDPR Rectial No. 124
Lead Authority Regarding Processing in Several Member States*
GDPR Rectial No. 125
Competences of the Lead Authority*
GDPR Rectial No. 126
Joint Decisions*
GDPR Rectial No. 127
Information of the Supervisory Authority Regarding Local Processing*
GDPR Rectial No. 128
Responsibility Regarding Processing in the Public Interest*
GDPR Rectial No. 129
Tasks and Powers of the Supervisory Authorities*
GDPR Rectial No. 130
Consideration of the Authority with which the Complaint has been Lodged*
GDPR Rectial No. 131
Attempt of an Amicable Settlement*
GDPR Rectial No. 132
Awareness-Raising Activities and Specific Measures*
GDPR Rectial No. 133
Mutual Assistance and Provisional Measures*
GDPR Rectial No. 134
Participation in Joint Operations*
GDPR Rectial No. 135
Consistency Mechanism*
GDPR Rectial No. 136
Binding Decisions and Opinions of the Board*
GDPR Rectial No. 137
Provisional Measures*
GDPR Rectial No. 138
Urgency Procedure*
GDPR Rectial No. 139
European Data Protection Board*
GDPR Rectial No. 140
Secretariat and Staff of the Board*
GDPR Rectial No. 141
Right to Lodge a Complaint*
GDPR Rectial No. 142
The Right of Data Subjects to Mandate a Not-For-Profit Body, Organisation or Association*
GDPR Rectial No. 143
Judicial Remedies*
GDPR Rectial No. 144
Related Proceedings*
GDPR Rectial No. 145
Choice of Venue*
GDPR Rectial No. 146
Indemnity*
GDPR Rectial No. 147
Jurisdiction*
GDPR Rectial No. 148
Penalties*
GDPR Rectial No. 149
Penalties for Infringements of National Rules*
GDPR Rectial No. 150
Administrative Fines*
GDPR Rectial No. 151
Administrative Fines in Denmark and Estonia*
GDPR Rectial No. 152
Power of Sanction of the Member States*
GDPR Rectial No. 153
Processing of Personal Data Solely for Journalistic Purposes or for the Purposes of Academic, Artistic or Literary Expression*
GDPR Rectial No. 154
Principle of Public Access to Official Documents*
GDPR Rectial No. 155
Processing in the Employment Context*
GDPR Rectial No. 156
Processing for Archiving, Scientific or Historical Research or Statistical Purposes*
GDPR Rectial No. 157
Information from Registries and Scientific Research*
GDPR Rectial No. 158
Processing for Archiving Purposes*
GDPR Rectial No. 159
Processing for Scientific Research Purposes*
GDPR Rectial No. 160
Processing for Historical Research Purposes*
GDPR Rectial No. 161
Consenting to the Participation in Clinical Trials*
GDPR Rectial No. 162
Processing for Statistical Purposes*
GDPR Rectial No. 163
Production of European and National Statistics*
GDPR Rectial No. 164
Professional or Other Equivalent Secrecy Obligations*
GDPR Rectial No. 165
No Prejudice of the Status of Churches and Religious Associations*
GDPR Rectial No. 166
Delegated Acts of the Commission*
GDPR Rectial No. 167
Implementing Powers of the Commission*
GDPR Rectial No. 168
Implementing Acts on Standard Contractual Clauses*
GDPR Rectial No. 169
Immediately Applicable Implementing Acts*
GDPR Rectial No. 170
Principle of Subsidiarity and Principle of Proportionality*
GDPR Rectial No. 171
Repeal of Directive 95/46/EC and Transitional Provisions*
GDPR Rectial No. 172
Consultation of the European Data Protection Supervisor*
GDPR Rectial No. 173
Relationship to Directive 2002/58/EC*

* – These titles are unofficial description.

Scroll to Top