Laws · GDPR ·art-24-par-2 EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.
Full text
Where proportionate in relation to processing activities, the measures referred to in paragraph 1 shall include the implementation of appropriate data protection policies by the controller.
How it connects
Cited by
- Guidelines 06/2020 on the interplay of the Second Payment Services Directive and the GDPR
- MALTA DPA: Insufficient technical and organisational measures to ensure information security
- MALTA DPA: Insufficient fulfilment of data subjects rights
- Axpo Italia Spa: Non-compliance with general data processing principles
- Opinion 2/2026 on the Proposal for a Directive amending Directives (EU) 2016/2341 and 2016/97 as regards the strengthening of the framework for occupational retirement provision
All 14
- UODO fines accounting firm €2,760 for email breach security failures
- EDPB-EDPS Joint opinion 2/2026 on the Proposal for a Regulation as regards the simplification of the digital legislative framework (
- If it ain’t broke, don’t fix it? Ten improvements for the upcoming tenth anniversary of the General Data Protection Regulation
- DPC (Ireland) - 06/SIU/2018
- Statement 1/2025 on Age Assurance
- EDPB-EDPS Joint Opinion 02/2023 on the Proposal for a Regulation of the European Parliament and of the Council on the establishment of the digital euro
- EDPB-EDPS Joint Opinion 01/2023 on the Proposal for a Regulation of the European Parliament and of the Council laying down additional procedural rules relating to the enforcement of Regulation (EU) 2016/679
- Zalando SE v European Commission
- European Commission v Hungary