Organizational measures that should be implemented by the data controller and processor to ensure a level of security appropriate to the risk, e.g. Paper documents management, Physical access control, System administrator appointment, People in charge appointment.

HOPEX Privacy Management.