Translations:De GDPR en archiefzorg: wat is er nog mogelijk?/16/en

Additional concepts and important articles

Appropriate technical and organisational measures

The GDPR states several times that each organisation must take appropriate technical and organisational measures for personal data processing. These measures must take into account the technology currently available, the implementation costs and the nature, scope and context of the organisation, and the processing purposes. The legal text mentions pseudonymisation and encryption as possible measures, and also states that organisations must guarantee, assess and evaluate the reliability of their processing systems.