Contractual matters related to data protection are crucial to ensure compliance with data protection regulations and to protect data subjects’ rights concerning the protection of their personal data.
Legal instruments are necessary tools for cyber-risk reduction. They contribute to the implementation of organisational measures to minimise the financial and operational consequences of an attack, but must be accompanied by the implementation of best practices and proven procedures to ensure that cybersecurity risks are managed appropriately.
They include:
- contracts (SLAs, etc.);
- internal procedures;
- internal regulations.
