Podio App Market

Awareness & Processes

Log how your processes run and create awareness

Employees across all operational units that handle personal data should be trained to identify situations that could constitute a data breach and how to properly report it. As a best practice, employees or contractors should be trained initially upon hiring, and should be given refresher trainings at least annually thereafter.

The organization should also have documented business continuity and disaster recovery plans in place to ensure the integrity of security measures.

Security measures, such as pseudonymization and encryption, should be implemented in a manner proportionate to the sensitivity of the data held and the nature and scope of the processing.