What’s Worse: Underestimating or Overestimating the Size of a Data Breach?
When a data breach happens, the key factors become timing, severity, and the ability to respond proactively to remediate and recover.
When a data breach happens, the key factors become timing, severity, and the ability to respond proactively to remediate and recover.
In this final post of the series, we turn our attention to another important requirement in GDPR: personal data breach notification.
GDPR defines two types of personal data: “Basic” personal data (Article 6), and special categories of personal data (Article 9).
In the context of GDPR, finding what to protect means finding where a given organization stores its personal data.
Tech Series 2: Element-level protection techniques satisfy the pseudonymization and anonymization requirements for the GDPR.
While the GDPR deems pseudonymization sufficient, it does not preclude other means of data protection such as anonymization.