SECTION 2 SECTION 2 SECTION 2 SECTION 2 DATA SECURITY DATA SECURITY DATA SECURITY DATA SECURITY Article 27 Article 27 Article 27 Article 27 Security of processing Security of processing Security of processing Security of processing Amendment 90 1. Member States shall provide that 1. Member States shall provide that 1. Having regard to available 1. Member States shall provide the controller and the processor the controller and the processor technology and the costs of that, having regard to the state of implements appropriate technical implementsimplement appropriate implementation and taking into the art and the costs of and organisational measures to technical and organisational account the nature, scope, context implementation and taking into ensure a level of security measures to ensure and purposes of the processing as account the nature, scope, context and procedures appropriate to the risks represented a level of security appropriate to the well as the likelihood and severity and purposes of the processing as by the processing and the nature of risks represented by the processing of the risk for the rights and well as the risk of varying the data to be protected, having and the nature of the data to be freedoms of individuals, Member likelihood and severity for the regard to the state of the art and the protected, having regard to the state States shall provide that the rights and freedoms of individuals, cost of their implementation. of the art and the cost of their controller and the processor the controller and the processor implementation. implement appropriate technical shall implement appropriate and organisational measures to technical and organisational ensure a level of security measures, to ensure a level of appropriate to the risk security appropriate to the risk, in (…). particular as regards the processing of special categories of data referred to in Article 8. 2. In respect of automated data 2. In respect of automated data 2. In respect of automated data 2. In respect of automated data processing, each Member State processing, each Member State shall processing, each Member State processing, each Member State shall provide that the controller or provide that the controller or shall provide that the controller or shall provide that the controller or processor, following an evaluation processor, following an evaluation processor, following an evaluation processor, following an evaluation of the risks, implements measures of the risks, implements measures of the risks, implements measures of the risks, implements measures designed to: designed to: designed to: designed to: (a) deny unauthorised persons (a) deny unauthorised persons access (a) deny unauthorised persons (a) deny unauthorised persons
SECTION 2 DATA SECURITY SECTION 2 DATA SECURITY SECTION 2 DATA SECURITY SECTION 2 DATA SECURITY Article 27 Article 27 Article 27 Article 27 Security of processing Security of processing Security of processing Security of processing Amendment 90 1. Member States shall provide that the controller and the processor implements appropriate technical and organisational measures to ensure a level of security appropriate to the risks represented by the processing and the nature of the data to be protected, having regard to the state of the art and the cost of their implementation. 1. Member States shall provide that the controller and the processor implementsimplement appropriate technical and organisational measures and procedures to ensure a level of security appropriate to the risks represented by the processing and the nature of the data to be protected, having regard to the state of the art and the cost of their implementation. 1. Having regard to available technology and the costs of implementation and taking into account the nature, scope, context and purposes of the processing as well as the likelihood and severity of the risk for the rights and freedoms of individuals, Member States shall provide that the controller and the processor implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk (…). 1. Member States shall provide that, having regard to the state of the art and the costs of implementation and taking into account the nature, scope, context and purposes of the processing as well as the risk of varying likelihood and severity for the rights and freedoms of individuals, the controller and the processor shall implement appropriate technical and organisational measures, to ensure a level of security appropriate to the risk, in particular as regards the processing of special categories of data referred to in Article 8. 2. In respect of automated data processing, each Member State shall provide that the controller or processor, following an evaluation of the risks, implements measures designed to: 2. In respect of automated data processing, each Member State shall provide that the controller or processor, following an evaluation of the risks, implements measures designed to: 2. In respect of automated data processing, each Member State shall provide that the controller or processor, following an evaluation of the risks, implements measures designed to: 2. In respect of automated data processing, each Member State shall provide that the controller or processor, following an evaluation of the risks, implements measures designed to: (a) deny unauthorised persons (a) deny unauthorised persons access (a) deny unauthorised persons (a) deny unauthorised persons
4_4column_table_EN.docx