GDPR

GDPR

1. On Controller's written instruction

2. individuals are under confidentiality

3. Comply with Art 32

   • Pseudonymisation and Anonymisation
   • Ongoing
     • ability to ensure the ongoing confidentiality, integrity, availability and resilience of processing systems and services
   • Restore
     • ability to restore the availability and access to personal data in a timely manner in the event of a physical or technical incident;
   • Testing
     • process for regularly testing, assessing and evaluating the effectiveness of technical and organisational measures for ensuring the security of the processing

4. Assist the Controller including on DS rights

5. Assist Controller with Arts 32-36

6. Give info to Controller to show compliance and allow audits