Laws · GDPR ·art-32-par-2 EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.
Full text
In assessing the appropriate level of security account shall be taken in particular of the risks that are presented by processing, in particular from accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to personal data transmitted, stored or otherwise processed.
How it connects
Cited by
- Global Business Travel Spain SLU: Insufficient technical and organisational measures to ensure information security
- Aleris Sjukvård AB: Insufficient technical and organisational measures to ensure information security
- Aleris Sjukvård AB: Insufficient technical and organisational measures to ensure information security
- Östergötland Region: Insufficient technical and organisational measures to ensure information security
- Västerbotten Region: Insufficient technical and organisational measures to ensure information security
All 93
- Sahlgrenska University Hospital: Insufficient technical and organisational measures to ensure information security
- Karolinska University Hospital of Solna: Insufficient technical and organisational measures to ensure information security
- Capio St. Göran AB: Insufficient technical and organisational measures to ensure information security
- Banca Transilvania SA: Insufficient technical and organisational measures to ensure information security
- ING Bank N.V. Amsterdam - Bucharest office: Insufficient technical and organisational measures to ensure information security
- Security company (name not available at the moment): Insufficient technical and organisational measures to ensure information security
- Lugera & Makler Broker S.R.L.: Insufficient technical and organisational measures to ensure information security
- Budapest Főváros Kormányhivatala XI. kerületi Hivatalát (11th District Public Health Department of the Government Office of the Capital City Budapest): Insufficient technical and organisational measures to ensure information security
- Website operator: Non-compliance with general data processing principles
- Ferde AS: Non-compliance with general data processing principles
- Vodafone România SA: Insufficient technical and organisational measures to ensure information security
- One Way Private Company: Insufficient technical and organisational measures to ensure information security
- Retail company (name not available at the moment): Insufficient technical and organisational measures to ensure information security
- Kaufland Romania SCS: Insufficient technical and organisational measures to ensure information security
- Telecommunications company: Insufficient technical and organisational measures to ensure information security
- Alpha Bank Romania SA: Insufficient technical and organisational measures to ensure information security
- Realmedia Network SA: Insufficient technical and organisational measures to ensure information security
- Curtea Veche Publishing SRL: Insufficient technical and organisational measures to ensure information security
- Medicover S.R.L.: Insufficient technical and organisational measures to ensure information security
- OTP LEASING ROMANIA IFN SA: Insufficient technical and organisational measures to ensure information security
- Casa Rusu S.R.L.: Insufficient technical and organisational measures to ensure information security
- Kaufland Romania SCS: Insufficient technical and organisational measures to ensure information security
- Apă Canal Ilfov SA: Insufficient technical and organisational measures to ensure information security
- BRISTOL LOGISTICS SA: Insufficient technical and organisational measures to ensure information security
- Finopro IFN SA: Insufficient technical and organisational measures to ensure information security
- Integral Collection SRL: Insufficient technical and organisational measures to ensure information security
- Partidul Uniunea Salvați România: Insufficient technical and organisational measures to ensure information security
- Tinmar Energy SA: Insufficient technical and organisational measures to ensure information security
- Centrul Medical dr. Furtună Dan: Insufficient technical and organisational measures to ensure information security
- Med Life S.A.: Insufficient technical and organisational measures to ensure information security
- Debt collection agency: Insufficient technical and organisational measures to ensure information security
- Political party: Insufficient technical and organisational measures to ensure information security
- Bulgarian Post EAD: Insufficient technical and organisational measures to ensure information security
- NN Pensii Societate de Administrare a unui Fond de Pensii Administrat Privat S.A.: Insufficient technical and organisational measures to ensure information security
- NN Asigurări de Viață S.A.: Insufficient technical and organisational measures to ensure information security
- AUTOMOBILE BAVARIA SRL: Insufficient technical and organisational measures to ensure information security
- Artima S.A.: Insufficient technical and organisational measures to ensure information security
- Farmacia Ardealul SRL: Insufficient technical and organisational measures to ensure information security
- Benetton Group S.r.l.: Non-compliance with general data processing principles
- ING Bank NV Amsterdam Sucursala București: Insufficient technical and organisational measures to ensure information security
- RESTART ENERGY ONE S.A.: Insufficient technical and organisational measures to ensure information security
- Cez Vânzare S.A.: Insufficient technical and organisational measures to ensure information security
- Mensajero SRL: Insufficient technical and organisational measures to ensure information security
- Norwegian Labor and Welfare Administration: Insufficient technical and organisational measures to ensure information security
- Veranda Obor S.A.: Insufficient technical and organisational measures to ensure information security
- TECHNINK LEB SRL: Insufficient technical and organisational measures to ensure information security
- VESTA CEU ROMÂNIA SRL.: Insufficient technical and organisational measures to ensure information security
- EURO MINI STORAGE ROMANIA SRL: Insufficient technical and organisational measures to ensure information security
- ALPHA BANK ROMANIA SA.: Insufficient technical and organisational measures to ensure information security
- IRIDEX GROUP SALUBRIZARE SRL: Insufficient technical and organisational measures to ensure information security
- MEDICOVER SRL: Insufficient technical and organisational measures to ensure information security
- CENTRUL MEDICAL UNIREA SRL: Insufficient technical and organisational measures to ensure information security
- Rețele Electrice Muntenia SA.: Insufficient technical and organisational measures to ensure information security
- Rețele Electrice Dobrogea SA: Insufficient technical and organisational measures to ensure information security
- Constanța South Container Terminal SRL: Insufficient technical and organisational measures to ensure information security
- Your Consulting SRL: Insufficient technical and organisational measures to ensure information security
- Ana Hotels SRL: Insufficient technical and organisational measures to ensure information security
- DELIVERY SOLUTIONS S.A.: Insufficient technical and organisational measures to ensure information security
- Softehnica S.R.L.: Insufficient technical and organisational measures to ensure information security
- Company: Insufficient legal basis for data processing
- Hospital: Insufficient technical and organisational measures to ensure information security
- 'FLEXICREDIT' Mutual Aid House Association: Insufficient technical and organisational measures to ensure information security
- EDPB Annual Report 2024
- Thessaloniki–Thessaly Gas Supply Company S.A.: Insufficient data processing agreement
- UODO fines accounting firm €2,760 for email breach security failures
- UODO reprimands electricity seller for Art. 5, 24, 25, 28, 32 GDPR violations over
- Croatian Insurance Bureau: Insufficient technical and organisational measures to ensure information security
- Permanent TSB: Insufficient technical and organisational measures to ensure information security
- ANSPDCP (Romania) - 02/07/2026
- VDAI fines medical company €450,000 for inadequate security measures in data breaches
- UODO (Poland) - DKN.5131.27.2023
- Persónuvernd (Island) - 2025010358
- Opinion 7/2024 on the draft decision of the German North Rhine Westphalia Supervisory Authority regarding the EU Cloud Service Data Protection (Auditor) certification criteria
- EDPB-EDPS Joint Opinion 02/2023 on the Proposal for a Regulation of the European Parliament and of the Council on the establishment of the digital euro
- EDPB Annual Report 2022
- Slovak court upholds €50,000 fine against Sociálna poisťovňa for sending sensitive data
- X v Russmedia Digital SRL and Inform Media Press SRL
- ANSPDCP (Romania) - Fine against Orange Romania SA of July 17, 2026
- UODO (Poland) - DKN.5131.5.2025
- ANSPDCP (Romania) - Fine against Homelux SRL
- ANSPDCP (Romania) - Fine against Poliserv JG (PJG) SRL
- ANSPDCP (Romania) - Fine against GEROCOSSEN S.R.L.
- Hôpital privé de la Loire: Insufficient technical and organisational measures to ensure information security
- IMY fines Miljödata SEK for Article 32 GDPR violation after ransomware breach of 2.2M
- Icelandic DPA opens formal proceedings against Isavia over ANPR parking cameras at
- Global Customer Care Services S.R.L.: Insufficient technical and organisational measures to ensure information security
- US Split - Us I-2709/2025-11
- ANSPDCP (Romania) - Fine against GLOBAL CUSTOMER CARE SERVICES S.R.L