The European Parliament and the Council, acting in accordance with the ordinary legislative procedure, shall lay down the rules relating to the protection of individuals with regard to the processing of personal data by Union institutions, bodies, offices and agencies, and by the Member States when carrying out activities which fall within the scope of Union law, and the rules relating to the free movement of such data.
Déanfaidh Parlaimint na hEorpa agus an Chomhairle, ag gníomhú dóibh i gcomhréir leis an ngnáthnós imeachta reachtach, na rialacha a leagan síos a bhaineann le daoine aonair a chosaint i dtaca le sonraí pearsanta a bheith á bpróiseáil ag institiúidí, a gcomhlachtaí, ag oifigí agus ag gníomhaireachtaí an Aontais, agus ag na Ballstáit nuair a bheidh gníomhaíochtaí á gcur i gcrích acu a thig faoi raon feidhme dhlí an Aontais, agus na rialacha a bhaineann le saorghluaiseacht na sonraí sin.