|
Post by juthi52943 on Jan 4, 2024 10:16:28 GMT
Actions taken to minimize harm to data subjects To put it bluntly we can expect some flexibility from the authority towards data controllers or processors who admitted to the breach and then took action to repair or limit the effects of the breach. That is why it is so important (and beneficial) to demonstrate a responsible active attitude after detecting violations. IOD function this is conveyed well The degree of responsibility Job Function Email List of the controller or processor taking into account technical and organizational measures Violations may have various causes and sometimes they cannot be avoided despite taking many precautions. For this reason when making an assessment the authority will take into account whether the controller has implemented technical measures consistent with the principle. A data protection by design or the principle of data protection by default whether it has implemented organizational measures that ensure the effectiveness of this principle at all levels of the organization whether it has ensured appropriate level of security whether appropriate data protection procedures are known and applied at the appropriate management level in his organization.
|
|