Data protection by design and by default

Controllers must implement appropriate technical and organisational measures that embed data protection principles and default to only necessary processing.

Article

Art. 25

Chapter

Chapter IV — Controller and processor