GDPR and ISO norms

The entry into force of the GDPR on May 25th, 2018, provides for the implementation of adequate technical and organizational measures – both when determining the means of data treatment (Privacy by design – Art. 25 GDPR) and at the time of processing itself – including, for example, data minimization (the latter must be guaranteed by default – Privacy by default – Art. 25 GDPR) and security of processing (Art. 32 GDPR).