Technical and Organisational Measures for Data Protection

This checklist outlines the necessary Technical and Organisational Measures (TOM) required by contractors to ensure compliance with GDPR (Art. 32). It includes measures for confidentiality, integrity, availability, and regular review processes. Each measure is categorized as either technical or organizational and specifies responsible parties. This document serves as a comprehensive guide for contractors handling personal data to maintain data protection standards.