EDPB publishes OSS case digest on Security of Processing and Data Breach Notification

Summary:

The European Data Protection Board (EDPB) has published a thematic one-stop-shop case digest on Security of Processing (Art. 32 GDPR) and Data Breach Notification (Art. 33 & 34 GDPR). The digest provides insights on how data protection authorities (DPAs) have interpreted and applied GDPR provisions in various scenarios, such as hacking, ransomware, and accidental data disclosure. The case digest offers a pool of analyses on security incidents, including corresponding security measures found to be appropriate or not in specific contexts. This resource is useful for organizations (controllers and processors) to assess their security measures, both before and after a data breach, and to ensure compliance with GDPR requirements.