Regulation (EU) 2018/1725 — Article 4

Article total: 1 part · 3 Council drafts · 5 Parliament amendments

Tracked part

Removed wording is struck through; added or replacement wording is highlighted.

Institutional text

European Commission proposal

All Commission’s changes to EU institutions data protection regulation

The wording proposed by the Commission at the start of this legislative file.

Full article with Commission changes

Article with proposed changes

Official consolidated text dated 23 October 2018, with the Commission proposal change affecting this article applied.

Article 4

Principles relating to processing of personal data

1.
Personal data shall be:
1. (a)
  
  processed lawfully, fairly and in a transparent manner in relation to the data subject (‘lawfulness, fairness and transparency’);
2. (b)
  
  collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes; further processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes shall, in accordance with Article 13, ~~not~~ be considered to be ~~incompatible~~compatible with the initial purposes, independent of the conditions of Article 6 of this Regulation, (‘purpose limitation’);
3. (c)
  
  adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed (‘data minimisation’);
4. (d)
  
  accurate and, where necessary, kept up to date; every reasonable step must be taken to ensure that personal data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay (‘accuracy’);
5. (e)
  
  kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed; personal data may be stored for longer periods insofar as the personal data will be processed solely for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 13 subject to implementation of the appropriate technical and organisational measures required by this Regulation in order to safeguard the rights and freedoms of the data subject (‘storage limitation’);
6. (f)
  
  processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures (‘integrity and confidentiality’).
2.

The controller shall be responsible for, and be able to demonstrate compliance with, paragraph 1 (‘accountability’).

Commission source wording and instructions

Article 4(1)(b)

Commission proposal

(b) collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes; further processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes shall, in accordance with Article 13, be considered to be compatible with the initial purposes, independent of the conditions of Article 6 of this Regulation, (‘purpose limitation’);

Institutional text

Council Presidency texts

Successive Presidency compromise texts. Their inclusion does not imply agreement or adoption.

Council document

View full Council comparison →

Article in June Presidency compromise · 10 June Council text

Comparison basis: Existing law (23 October 2018) compared with June Presidency compromise · 10 June (10 June 2026)

Article 4

Principles relating to processing of personal data

1.
Personal data shall be:
1. (a)
  
  processed lawfully, fairly and in a transparent manner in relation to the data subject (‘lawfulness, fairness and transparency’);
2. (b)
  
  collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes; further processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes shall, subject to the application of appropriate safeguards in accordance with Article 13, ~~not~~ be considered to be ~~incompatible~~compatible with the initial purposes, independent of the conditions of Article 6 of this Regulation, (‘purpose limitation’);
3. (c)
  
  adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed (‘data minimisation’);
4. (d)
  
  accurate and, where necessary, kept up to date; every reasonable step must be taken to ensure that personal data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay (‘accuracy’);
5. (e)
  
  kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed; personal data may be stored for longer periods insofar as the personal data will be processed solely for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 13 subject to implementation of the appropriate technical and organisational measures required by this Regulation in order to safeguard the rights and freedoms of the data subject (‘storage limitation’);
6. (f)
  
  processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures (‘integrity and confidentiality’).
2.

The controller shall be responsible for, and be able to demonstrate compliance with, paragraph 1 (‘accountability’).

Article 4(1)(b)

June Presidency compromise · 10 June

Council wording reconstructed for this provision from the official operation

(b)

collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes; further processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes shall, subject to the application of appropriate safeguards in accordance with Article 13, be considered to be compatible with the initial purposes, independent of the conditions of Article 6 of this Regulation, (‘purpose limitation’)

View full Council comparison →

Article in June Presidency compromise · 18 June Council text

Comparison basis: Existing law (23 October 2018) compared with June Presidency compromise · 18 June (18 June 2026)

Article 4

Principles relating to processing of personal data

1.
Personal data shall be:
1. (a)
  
  processed lawfully, fairly and in a transparent manner in relation to the data subject (‘lawfulness, fairness and transparency’);
2. (b)
  
  collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes; further processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes shall, subject to the application of appropriate safeguards in accordance with Article 13, ~~not~~ be considered to be ~~incompatible~~compatible with the initial purposes, independent of the conditions of Article 6 of this Regulation, (‘purpose limitation’);
3. (c)
  
  adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed (‘data minimisation’);
4. (d)
  
  accurate and, where necessary, kept up to date; every reasonable step must be taken to ensure that personal data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay (‘accuracy’);
5. (e)
  
  kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed; personal data may be stored for longer periods insofar as the personal data will be processed solely for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 13 subject to implementation of the appropriate technical and organisational measures required by this Regulation in order to safeguard the rights and freedoms of the data subject (‘storage limitation’);
6. (f)
  
  processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures (‘integrity and confidentiality’).
2.

The controller shall be responsible for, and be able to demonstrate compliance with, paragraph 1 (‘accountability’).

Article 4(1)(b)

June Presidency compromise · 18 June

Council wording reconstructed for this provision from the official operation

(b)

View full Council comparison →

Article in September Presidency compromise Council text

Comparison basis: Existing law (23 October 2018) compared with September Presidency compromise (3 September 2026)

Article 4

Principles relating to processing of personal data

1.
Personal data shall be:
1. (a)
  
  processed lawfully, fairly and in a transparent manner in relation to the data subject (‘lawfulness, fairness and transparency’);
2. (b)
  
  collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes; further processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes shall, subject to the application of appropriate safeguards in accordance with Article 13, ~~not~~ be considered to be ~~incompatible~~compatible with the initial purposes, independent of the conditions of Article 6 of this Regulation, (‘purpose limitation’);
3. (c)
  
  adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed (‘data minimisation’);
4. (d)
  
  accurate and, where necessary, kept up to date; every reasonable step must be taken to ensure that personal data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay (‘accuracy’);
5. (e)
  
  kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed; personal data may be stored for longer periods insofar as the personal data will be processed solely for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 13 subject to implementation of the appropriate technical and organisational measures required by this Regulation in order to safeguard the rights and freedoms of the data subject (‘storage limitation’);
6. (f)
  
  processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures (‘integrity and confidentiality’).
2.

The controller shall be responsible for, and be able to demonstrate compliance with, paragraph 1 (‘accountability’).

Article 4(1)(b)

September Presidency compromise

Council wording reconstructed for this provision from the official operation

(b) collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes; further processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes shall, subject to the application of appropriate safeguards in accordance with Article 13, be considered to be compatible with the initial purposes, independent of the conditions of Article 6 of this Regulation, (‘purpose limitation’)

Official source passage and amending instruction

2. Article 4 (1)(b) is replaced by the following: ‘(b) collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes; further processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes shall, subject to the application of appropriate safeguards in accordance with Article 13, be considered to be compatible with the initial purposes, independent of the conditions of Article 6 of this Regulation, (‘purpose limitation’);

Article 4(1)(b) 3 Council drafts

Article 4(1)(b)

10 June 2026 · June Presidency compromise · 10 June

Council wording reconstructed for this provision from the official operation

(b)

Article 4(1)(b)

18 June 2026 · June Presidency compromise · 18 June

Council wording reconstructed for this provision from the official operation

(b)

Article 4(1)(b)

3 September 2026 · September Presidency compromise

Council wording reconstructed for this provision from the official operation

(b) collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes; further processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes shall, subject to the application of appropriate safeguards in accordance with Article 13, be considered to be compatible with the initial purposes, independent of the conditions of Article 6 of this Regulation, (‘purpose limitation’)

Official source passage and amending instruction

Competing proposals

European Parliament amendments

These are alternative tabled amendments. An amendment affecting several tracked parts appears once here, with each target identified.

Search amendments

Political group at the amendment date where available; otherwise the current Parliament affiliation.

Alternative wording Amendment 69 ITRE–LIBE draft report · Aura Salla and Marina Kaljurand (rapporteurs)

(b) collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes; further processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes shall, subject to the application of appropriate safeguards in accordance with Article 13, be considered to be compatible with the initial purposes, independent of the conditions of Article 6 of this Regulation, (‘purpose limitation’);

Preview
against:

Article 4

Principles relating to processing of personal data

1.
Personal data shall be:
1. (a)
  
  processed lawfully, fairly and in a transparent manner in relation to the data subject (‘lawfulness, fairness and transparency’);
2. (b)
  
  collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes; further processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes shall, subject to the application of appropriate safeguards in accordance with Article 13, ~~not~~ be considered to be ~~incompatible~~compatible with the initial purposes, independent of the conditions of Article 6 of this Regulation, (‘purpose limitation’);
3. (c)
  
  adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed (‘data minimisation’);
4. (d)
  
  accurate and, where necessary, kept up to date; every reasonable step must be taken to ensure that personal data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay (‘accuracy’);
5. (e)
  
  kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed; personal data may be stored for longer periods insofar as the personal data will be processed solely for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 13 subject to implementation of the appropriate technical and organisational measures required by this Regulation in order to safeguard the rights and freedoms of the data subject (‘storage limitation’);
6. (f)
  
  processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures (‘integrity and confidentiality’).
2.

The controller shall be responsible for, and be able to demonstrate compliance with, paragraph 1 (‘accountability’).

Article 4

Principles relating to processing of personal data

1.
Personal data shall be:
1. (a)
  
  processed lawfully, fairly and in a transparent manner in relation to the data subject (‘lawfulness, fairness and transparency’);
2. (b)
  
  collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes; further processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes shall, subject to the application of appropriate safeguards in accordance with Article 13, be considered to be compatible with the initial purposes, independent of the conditions of Article 6 of this Regulation, (‘purpose limitation’);
3. (c)
  
  adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed (‘data minimisation’);
4. (d)
  
  accurate and, where necessary, kept up to date; every reasonable step must be taken to ensure that personal data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay (‘accuracy’);
5. (e)
  
  kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed; personal data may be stored for longer periods insofar as the personal data will be processed solely for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 13 subject to implementation of the appropriate technical and organisational measures required by this Regulation in order to safeguard the rights and freedoms of the data subject (‘storage limitation’);
6. (f)
  
  processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures (‘integrity and confidentiality’).
2.

The controller shall be responsible for, and be able to demonstrate compliance with, paragraph 1 (‘accountability’).

Remove proposed wording Amendment 1626 ITRE · LIBE

2. Article 4 (1)(b) is replaced by the following: (b) collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes; further processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes shall, in accordance with Article 13, be considered to be compatible with the initial purposes, independent of the conditions of Article 6 of this Regulation, (‘purpose limitation’);’

Preview
against:

Article 4

Principles relating to processing of personal data

1.
Personal data shall be:
1. (a)
  
  processed lawfully, fairly and in a transparent manner in relation to the data subject (‘lawfulness, fairness and transparency’);
2. (b)
  
  collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes; further processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes shall, in accordance with Article 13, not be considered to be ~~compatible~~incompatible with the initial purposes~~, independent of the conditions of Article 6 of this Regulation,~~ (‘purpose limitation’);
3. (c)
  
  adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed (‘data minimisation’);
4. (d)
  
  accurate and, where necessary, kept up to date; every reasonable step must be taken to ensure that personal data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay (‘accuracy’);
5. (e)
  
  kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed; personal data may be stored for longer periods insofar as the personal data will be processed solely for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 13 subject to implementation of the appropriate technical and organisational measures required by this Regulation in order to safeguard the rights and freedoms of the data subject (‘storage limitation’);
6. (f)
  
  processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures (‘integrity and confidentiality’).
2.

The controller shall be responsible for, and be able to demonstrate compliance with, paragraph 1 (‘accountability’).

Alternative wording Amendment 1627 ITRE · LIBE

(b) collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes; further processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes shall, subject to the application of appropriate safeguards in accordance with Article 13 and the principle of lawfulness, be considered to be compatible with the initial purposes, independent of the conditions of Article 6 of this Regulation, (‘purpose limitation’);

Preview
against:

Article 4

Principles relating to processing of personal data

1.
Personal data shall be:
1. (a)
  
  processed lawfully, fairly and in a transparent manner in relation to the data subject (‘lawfulness, fairness and transparency’);
2. (b)
  
  collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes; further processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes shall, subject to the application of appropriate safeguards in accordance with Article 13 and the principle of lawfulness, be considered to be compatible with the initial purposes, independent of the conditions of Article 6 of this Regulation, (‘purpose limitation’);
3. (c)
  
  adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed (‘data minimisation’);
4. (d)
  
  accurate and, where necessary, kept up to date; every reasonable step must be taken to ensure that personal data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay (‘accuracy’);
5. (e)
  
  kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed; personal data may be stored for longer periods insofar as the personal data will be processed solely for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 13 subject to implementation of the appropriate technical and organisational measures required by this Regulation in order to safeguard the rights and freedoms of the data subject (‘storage limitation’);
6. (f)
  
  processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures (‘integrity and confidentiality’).
2.

The controller shall be responsible for, and be able to demonstrate compliance with, paragraph 1 (‘accountability’).

Alternative wording Amendment 1628 ITRE · LIBE

(b) collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes; further processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes shall, in accordance with Article 13, not be considered to be ~~compatible~~incompatible with the initial purposes~~, independent of the conditions of Article 6 of this Regulation,~~ (‘purpose limitation’);’

Preview
against:

Article 4

Principles relating to processing of personal data

1.
Personal data shall be:
1. (a)
  
  processed lawfully, fairly and in a transparent manner in relation to the data subject (‘lawfulness, fairness and transparency’);
2. (b)
  
  collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes; further processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes shall, in accordance with Article 13, not be considered to be ~~compatible~~incompatible with the initial purposes~~, independent of the conditions of Article 6 of this Regulation,~~ (‘purpose limitation’);’
3. (c)
  
  adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed (‘data minimisation’);
4. (d)
  
  accurate and, where necessary, kept up to date; every reasonable step must be taken to ensure that personal data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay (‘accuracy’);
5. (e)
  
  kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed; personal data may be stored for longer periods insofar as the personal data will be processed solely for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 13 subject to implementation of the appropriate technical and organisational measures required by this Regulation in order to safeguard the rights and freedoms of the data subject (‘storage limitation’);
6. (f)
  
  processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures (‘integrity and confidentiality’).
2.

The controller shall be responsible for, and be able to demonstrate compliance with, paragraph 1 (‘accountability’).

Additional proposed wording Amendment 1659 ITRE · LIBE

5b.

‘cognitive inference’ means any information, classification, prediction or assessment relating to a natural person’s cognitive, emotional, attentional, mnemonic or decision-making states, obtained through the automated processing of personal data.

Preview
against:

Article 4

Principles relating to processing of personal data

1.
Personal data shall be:
1. (a)
  
  processed lawfully, fairly and in a transparent manner in relation to the data subject (‘lawfulness, fairness and transparency’);
2. (b)
  
  collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes; further processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes shall, in accordance with Article 13, be considered to be compatible with the initial purposes, independent of the conditions of Article 6 of this Regulation, (‘purpose limitation’);
3. (c)
  
  adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed (‘data minimisation’);
4. (d)
  
  accurate and, where necessary, kept up to date; every reasonable step must be taken to ensure that personal data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay (‘accuracy’);
5. (e)
  
  kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed; personal data may be stored for longer periods insofar as the personal data will be processed solely for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 13 subject to implementation of the appropriate technical and organisational measures required by this Regulation in order to safeguard the rights and freedoms of the data subject (‘storage limitation’);
6. (f)
  
  processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures (‘integrity and confidentiality’).
2.

The controller shall be responsible for, and be able to demonstrate compliance with, paragraph 1 (‘accountability’).
5b.

‘cognitive inference’ means any information, classification, prediction or assessment relating to a natural person’s cognitive, emotional, attentional, mnemonic or decision-making states, obtained through the automated processing of personal data.

Article in June Presidency compromise · 10 June Council text

Article in June Presidency compromise · 18 June Council text

Article in September Presidency compromise Council text

Changes in context

European Commission proposal

Council Presidency text · ST 10426/26

Changes in context

Council Presidency text · ST 10426/26

Council Presidency text · ST 10677/26

Changes in context

Council Presidency text · ST 10677/26

Council Presidency text · ST 12535/26

Changes in context

Wording reproduced in the amendment

Amendment 1626 · ITRE–LIBE amendments 1565–1740 to the draft report: removal

Changes in context

Wording reproduced in the amendment

Amendment 1627 · ITRE–LIBE amendments 1565–1740 to the draft report

Changes in context

Wording reproduced in the amendment

Amendment 1628 · ITRE–LIBE amendments 1565–1740 to the draft report

Changes in context

Wording reproduced in the amendment

Amendment 69 · ITRE–LIBE draft report · Aura Salla and Marina Kaljurand (rapporteurs)