Article 14: Lawfulness of processing of personal data Article 15: Purpose specification, data minimisation, retention and accuracy Article 16: Children and other persons lacking legal capacity Article 17: Establishing data subject consent Article 18: Provision of information to a data subject Article 19: Responsibility for data processors CHAPTER IV—RIGHTS OF A DATA SUBJECT Article 20: Rights of confirmation, access, correction and deletion Article 21: Right to withdraw consent Article 22: Right to object Article 23: Right not to be subject to a decision based solely on automated processing CHAPTER V—DATA SECURITY AND DATA IMPACT ASSESSMENTS Article 24: Security, integrity and confidentiality of personal data Article 25: Data breach notifications Article 26: Contents of data breach notifications and communications Article 27: Records of data breaches Article 28: Guidance from the Authority Article 29: Data protection impact assessments CHAPTER VI—CROSS-BORDER TRANSFERS OF PERSONAL DATA Article 30: Adequate level of protection for cross-border transfers of personal data Article 31: Cross-border transfers in the absence of adequate protection 3