# Standard Data Protection Model (SDM), German DPAs

- Type: Tools
- Source: Datenschutzkonferenz (DSK)
- Date: 2026-11-11
- Original: https://www.datenschutzzentrum.de/uploads/sdm/SDM-Methode.pdf
- Canonical: https://overview.legal/posts/628504
- Topics: Security, Retention Period, DPIA, Controllers, Transparency, Supervision, Supervisory Authorities

## Summary

The German supervisory authorities’ method for turning the GDPR’s requirements into technical and organisational measures, through seven protection goals (data minimisation, availability, integrity, confidentiality, unlinkability, transparency, intervenability), with a catalogue of reference measures.

## Full text

The German supervisory authorities’ method for turning the GDPR’s requirements into technical and organisational measures, through seven protection goals (data minimisation, availability, integrity, confidentiality, unlinkability, transparency, intervenability), with a catalogue of reference measures.

When to use it: You must justify the technical and organisational measures of a system in a DPIA or an audit.
Provisions: GDPR Art. 5, GDPR Art. 25, GDPR Art. 32.
Published by Datenschutzkonferenz (DSK) (supervisory authority), for Germany.
For: DPOs and privacy officers, controllers, developers.
Free; available in German, English.

De methode van de Duitse toezichthouders om de eisen van de AVG om te zetten in technische en organisatorische maatregelen, via zeven beschermingsdoelen (minimalisering, beschikbaarheid, integriteit, vertrouwelijkheid, ontkoppelbaarheid, transparantie, interveneerbaarheid), met een catalogus van referentiemaatregelen.

Wanneer gebruiken: Je moet de technische en organisatorische maatregelen van een systeem onderbouwen in een DPIA of audit.

---
Generated by overview.legal · https://overview.legal/posts/628504 · 2026-11-14