supervisory authority should be in a position to prevent, prior to the start of operations, a risky processing which is not in compliance with this Directive, and to make proposals to remedy such situation. Such consultation may equally take place in the course of the preparation either of a measure of the national parliament or of a measure based on such legislative measure which defines the nature of the processing and lays down appropriate safeguards. Amendment 34 (41a) In order to maintain security (41a) In order to maintain security and to prevent processing in breach and to prevent processing in of this Directive, the controller or breach of this Directive, the processor should evaluate the risks controller or processor should inherent to the processing and evaluate the risks inherent to the implement measures to mitigate processing and implement those risks, such as encryption. measures to mitigate those risks. These measures should ensure an Those measures should ensure an appropriate level of security appropriate level of security, including confidentiality, taking into taking into account the state of the account the state of the art and the art and the costs of their costs of implementation in relation implementation in relation to the to the risk and the nature of the risks and the nature of the personal data to be protected. In personal data to be protected. assessing data security risks, When establishing technical consideration should be given to the standards and organisational risks that are presented by data measures to ensure security of
supervisory authority should be in a position to prevent, prior to the start of operations, a risky processing which is not in compliance with this Directive, and to make proposals to remedy such situation. Such consultation may equally take place in the course of the preparation either of a measure of the national parliament or of a measure based on such legislative measure which defines the nature of the processing and lays down appropriate safeguards. Amendment 34 (41a) In order to maintain security and to prevent processing in breach of this Directive, the controller or processor should evaluate the risks inherent to the processing and implement measures to mitigate those risks. Those measures should ensure an appropriate level of security, taking into account the state of the art and the costs of their implementation in relation to the risks and the nature of the personal data to be protected. When establishing technical standards and organisational measures to ensure security of (41a) In order to maintain security and to prevent processing in breach of this Directive, the controller or processor should evaluate the risks inherent to the processing and implement measures to mitigate those risks, such as encryption. These measures should ensure an appropriate level of security including confidentiality, taking into account the state of the art and the costs of implementation in relation to the risk and the nature of the personal data to be protected. In assessing data security risks, consideration should be given to the risks that are presented by data
4_4column_table_EN.docx