Judgment_paragraph 71 · Nemzeti Adatvédelmi és Információszabadság Hatóság v UC (C-169/23)

71Article 32 obliges the controller and any processor of that controller to implement appropriate technical and organisational measures to ensure an adequate level of security for the processing of personal data. The appropriateness of such measures must be assessed in a concrete manner, by taking into account the risks associated with the processing concerned and by assessing whether the nature, content and implementation of those measures are appropriate to those risks (see, to that effect, judgments of 14 December 2023, Natsionalna agentsia za prihodite, C‑340/21, EU:C:2023:986, paragraphs 42, 46 and 47, and of 25 January 2024, MediaMarktSaturn, C‑687/21, EU:C:2024:72, paragraphs 37 and 38).

Nemzeti Adatvédelmi és Információszabadság Hatóság v UC (C-169/23)

Key facts

History · 1 version

Connections