All 99 Articles Chapter 4: Controller and Processor
You must implement appropriate technical and organisational security measures for the risk — potentially including encryption, pseudonymisation, resilience and regular testing.
Key points
- Security must be proportionate to the risk to individuals.
- Examples: encryption, pseudonymisation, access control, backups, testing.
Related articles
Practical guidance
These summaries are a plain-English orientation only and are not a substitute for the official text of the Regulation or for legal advice.
Need to apply Article 32?
Our data-protection lawyers turn the text into a plan.