personal data processing according to Article 8, additional security measures have to be in place, in order to guarantee situation awareness of risks and the ability to take preventive, corrective and mitigating action in near real time against vulnerabilities or incidents detected that could pose a risk to the data. 2a. Member States shall provide (…) that processors may be appointed only if they guarantee that they observe the requisite technical and organisational measures under paragraph 1 and comply with the instructions under point (a) of Article 21(2). The competent authority shall monitor the processor in those respects. 3. The Commission may adopt, 3. The Commission may adopt, 3. deleted (…) where necessary, implementing acts where necessary, implementing acts for specifying the requirements laid for specifying the requirements laid down in paragraphs 1 and 2 to down in paragraphs 1 and 2 to various situations, notably various situations, notably encryption standards. Those encryption standards. Those implementing acts shall be adopted implementing acts shall be adopted in accordance with the examination in accordance with the examination procedure referred to in Article procedure referred to in Article 57(2). 57(2). Article 28 Article 28 Article 28 Article 28
personal data processing according to Article 8, additional security measures have to be in place, in order to guarantee situation awareness of risks and the ability to take preventive, corrective and mitigating action in near real time against vulnerabilities or incidents detected that could pose a risk to the data. 2a. Member States shall provide that processors may be appointed only if they guarantee that they observe the requisite technical and organisational measures under paragraph 1 and comply with the instructions under point (a) of Article 21(2). The competent authority shall monitor the processor in those respects. (…) 3. The Commission may adopt, where necessary, implementing acts for specifying the requirements laid down in paragraphs 1 and 2 to various situations, notably encryption standards. Those implementing acts shall be adopted in accordance with the examination procedure referred to in Article 57(2). 3. The Commission may adopt, where necessary, implementing acts for specifying the requirements laid down in paragraphs 1 and 2 to various situations, notably encryption standards. Those implementing acts shall be adopted in accordance with the examination procedure referred to in Article 57(2). 3. deleted (…) Article 28 Article 28 Article 28 Article 28
4_4column_table_EN.docx