Tanya is the Data Protection Officer for Curtains Inc., a GDPR data controller. She has recommended that the company encrypt all personal data at rest. Which GDPR principle is she following?

Question

Options

• AAccuracy
• BStorage Limitation
• CIntegrity and confidentiality
• DLawfulness, fairness and transparency

• A
  5% (3)
• B
  2% (1)
• C
  92% (55)
• D
  2% (1)

Explanation

The GDPR requires that personal data is processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures. This principle is known as integrity and confidentiality, or sometimes as security. Encryption is one of the possible technical measures that can be used to protect personal data at rest, as it makes the data unintelligible to anyone who does not have the key to decrypt it. By recommending that the company encrypts all personal data at rest, Tanya is following the principle of integrity and confidentiality, as she is ensuring that the personal data is secure and protected from unauthorised access or accidental damage.

No community discussion yet for this question.