This Chapter sets out—
the general obligations of controllers and processors (see sections 102 to 106);
specific obligations of controllers and processors with respect to security (see section 107);
specific obligations of controllers and processors with respect to personal data breaches (see section 108).