This second edition provides updated diagrams and information on the legal position of the General Data Protection Regulation (GDPR) on data security and data breaches. In particular, it presents a legally defensible compliance position for organisations in the form of a practical Accountability Framework for handling actual data breaches.

This second edition provides updated diagrams and information on the legal position of the General Data Protection Regulation (GDPR) on data security and data breaches.  In particular, it presents a legally defensible compliance position for organisations in the form of a practical Accountability Framework for handling actual data breaches. A new section provides a systematic approach to addressing technical and organisational control failures for which DPSAs have imposed heavy fines on organisations in the recent past.  There is a simple checklist that can help guide organisations to minimise data breaches, while at the same time strengthening their defensible position by demonstrating to regulators that best practices have in fact been followed. This revised Blue Paper is best guidance for professionals, politicians, scholars, and all who wish to glean more insight into how to develop a robust data protection framework.  What readers will find in this Blue Paper will empower them to assess their real situation and will aid them in conceptualising practical solutions.