A key principle of the GDPR is that you process personal data securely by means of ‘appropriate technical and organisational measures’ – this is the ‘security principle’. Doing this requires you to consider things like risk analysis, organisational policies, and physical and technical measures. You also have to take into account additional requirements about the security of your processing – and these also apply to data processors.
Amazon’s 746 Million Euro GDPR Fine Upheld by Luxembourg Court
Amazon lost its appeal against a 746 million euro fine for GDPR violations, as Luxembourg's court upheld the decision by […]