Security of Personal Data Flashcards
1
Q
What is controller obligation with respect to using appropriate technical and organisational measures?
A
Subject to state of the art/costs, controller shall implement appropriate technical and organisational measures.
2
Q
True or False: A controller’s obligation to implement appropriate technical and organisational measures is absolute.
A
False.
This obligation is subject to state of the art/costs.
3
Q
What are some examples of appropriate technical and organisational measures that can be implement to maintain security of personal data?
A
- Pseudonomisation
- encryption
- Confidentiality
4
Q
True or False. The GDPR specifically defines what is appropriate security.
A
False.
5
Q
The GDPR does not explicitly define appropriate security - why?
A
Security has to be appropriate to the risk of your processing.
