Aithris 78
Recital 78
(78) Le cosaint ceart agus saoirsí daoine nádúrtha i ndáil le próiseáil sonraí pearsanta, ceanglaítear go ndéantar bearta iomchuí teicniúla agus eagraíochtúla chun a áirithiú go gcomhlíontar ceanglais an Rialacháin seo.
Chun a bheith in ann comhlíonadh an Rialacháin seo a thaispeáint, ba cheart don rialaitheoir beartais inmheánacha a ghlacadh agus bearta a chur chun feidhme lena gcomhlíontar go háirithe prionsabal na cosanta sonraí trí dhearadh agus prionsabal na cosanta sonraí mar réamhshocrú.
D’fhéadfadh sé go n-áireofaí ar na bearta sin, inter alia, an phróiseáil a dhéantar ar shonraí pearsanta a laghdú, ainm bréige a chur i bhfeidhm ar shonraí pearsanta a luaithe agus is féidir, trédhearcacht maidir le feidhmeanna agus próiseáil sonraí pearsanta, cur ar chumas an ábhair sonraí faireachán a dhéanamh ar phróiseáil na sonraí, cur ar chumas an rialaitheora gnéithe slándála a chruthú agus a fheabhsú.
Agus feidhmchláir, seirbhísí agus táirgí á bhforbairt, á gceapadh, á roghnú agus á n-úsáid atá bunaithe ar phróiseáil sonraí pearsanta nó lena bpróiseáiltear sonraí pearsanta lena dtásc a chomhlíonadh, ba cheart táirgeoirí na dtáirgí, na seirbhísí agus na bhfeidhmchlár a spreagadh chun an ceart maidir le cosaint sonraí a chur san áireamh agus táirgí, seirbhísí agus feidhmchláir mar sin á bhforbairt agus á gceapadh acu, agus ba cheart aird chuí a thabhairt ar an úrscothacht, lena chinntiú go mbeidh rialaitheoirí agus próiseálaithe in ann a n-oibleagáidí maidir le cosaint sonraí a chomhlíonadh.
Ba cheart prionsabail na cosanta sonraí trí dhearadh agus mar réamhshocrú a chur san áireamh i gcomhthéacs tairiscintí poiblí.
(78) The protection of the rights and freedoms of natural persons with regard to the processing of personal data require that appropriate technical and organisational measures be taken to ensure that the requirements of this Regulation are met.
In order to be able to demonstrate compliance with this Regulation, the controller should adopt internal policies and implement measures which meet in particular the principles of data protection by design and data protection by default.
Such measures could consist, inter alia, of minimising the processing of personal data, pseudonymising personal data as soon as possible, transparency with regard to the functions and processing of personal data, enabling the data subject to monitor the data processing, enabling the controller to create and improve security features.
When developing, designing, selecting and using applications, services and products that are based on the processing of personal data or process personal data to fulfil their task, producers of the products, services and applications should be encouraged to take into account the right to data protection when developing and designing such products, services and applications and, with due regard to the state of the art, to make sure that controllers and processors are able to fulfil their data protection obligations.
The principles of data protection by design and by default should also be taken into consideration in the context of public tenders.
The latest consolidated version of the Regulation with corrections by Corrigendum, OJ L 127, 23.5.2018, p. 2 ((EU) 2016/679). Source: EUR-lex.