So the owner chooses the security measures to protect the data, adapting them to the risk . But what risks must he consider?
The Regulation mentions them in detail, recognizing the interested party's right to complete protection of their data , in the face of all possible risks . In fact, it is not just a matter of preserving data from unauthorized access but of ensuring that they are not destroyed, lost, modified or disclosed accidentally or unauthorized. Of course, one could object that avoiding the destruction or modification of data is first and foremost in the interest of the owner (who , for example, would want to lose their patients' data ?) but if the latter can assume all the risks by bearing any damage resulting from imprudent conduct, such conduct is not permitted when data of natural persons are involved .
Moreover, if it is certainly a risk to be avoided that information on a person's azerbaijan phone data health status is disseminated , it is equally so that data relating , for example, to an allergy to certain drugs is not available to the person who must prescribe a certain therapy.
The owner must therefore evaluate the risks by considering 360-degree data protection .
What are the appropriate safety measures ?
Once the risks have been identified, it is then a question of choosing the appropriate measures. Here the Regulation provides some ideas by saying that " the measures include , where appropriate ,
The risks of processing personal data
-
- Posts: 42
- Joined: Tue Jan 07, 2025 4:27 am