The state of the art requirement for GDPR security measures.
summary
Panel argues Article 32 ties security to a risk‑based duty to mitigate threats to confidentiality and integrity, not a checklist; practical anchors include state of the art as a moving snapshot captured by standards and certifications such as ISO 27001 and ISO 27701, and by national methods (German 5‑step, Dutch 4‑category). Evidence: 47 sanctions linked to Article 32 across 17 countries, disparities from €9.7 million fine to €2,700, and estimates that Italian SMEs face ~€1,000 per firm to reach baseline compliance.
AI-written summary · about
chapters (9)
- 0:00Start
- 0:59Introduction
- 5:58Determining Which Security Measures Are Appropriate
- 7:19Goal of the Gdpr
- 17:32Risk Assessment
- 21:32Context
- 25:12Personal Data Security
- 39:28Article 42 Certifications
- 42:30The New Legislative Framework
related talks
40mGDPR’s Information Security Requirements – What Exactly is ‘Appropriate’?
01h 14mCitizen security vs. data security ...
01h 12mCYBERSECURITY FOR EUROPE: FOSTERING RIGHTS THROUGH TECHNOLOGY
59mKeynote: Building in Privacy and Data Protection -- what is demanded by the GDPR?
01h 01mAcademic sessions on data protection law and privacy
26mAssessing Risks: Perspectives on the Data Protection Impact
59mMerging Security and Compliance: Perspectives on Emerging Regulations and Best Practices
30mPrivacy by Design?