2023-06-02T12:18:00+01:00By GRC World Forums
The GDPR recognises a “risk-based approach” in several areas of data protection compliance. Controllers can adjust some data protection and security practices, taking into account factors such as the nature of the data, the resources of the organisation, and the “state of the art”.