---
title: "Protect personal information"
description: "Protect personal information, family Govern, GDPR Art. 32"
url: https://www.alt-f1.be/en/table/gd/
organization: ALT-F1 SRL, Brussels (VAT BE 0830.560.718)
---

# Protect personal information

Short label: GDPR

Family: Govern · GDPR Art. 32
<a id="meaning"></a>

## Meaning

Personal information is information about identifiable people, including staff and customers. The GDPR governs its use and protection.

<a id="why"></a>

## Why it matters

Security, permitted use, retention and people’s rights all need attention; a hosting country alone does not settle them.

<a id="actions"></a>

## What you can do

Know which information you hold, why you use it and who can access it. Assess breach-notification duties against the actual event and applicable conditions.

## Services that can help

Sovereign Storage, Private AI and Web App Shield provide different technical measures. The organisation still manages its wider data-protection responsibilities.

- [Sovereign Storage](https://www.alt-f1.be/en/sovereign-storage.md)
- [Private AI](https://www.alt-f1.be/en/private-ai.md)
- [Web App Shield](https://www.alt-f1.be/en/web-shield.md)

## Official reference — GDPR Art. 32

> 1. Taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of processing as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons, the controller and the processor shall implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including inter alia as appropriate: (a) the pseudonymisation and encryption of personal data; (b) the ability to ensure the ongoing confidentiality, integrity, availability and resilience of processing systems and services; (c) the ability to restore the availability and access to personal data in a timely manner in the event of a physical or technical incident; (d) a process for regularly testing, assessing and evaluating the effectiveness of technical and organisational measures for ensuring the security of the processing.
>
> — Regulation (EU) 2016/679 (GDPR), Art. 32(1)

**What this reference concerns:** Personal data must be protected by measures that fit the risk: encryption, systems that stay available, restore after an incident, and regular testing.

[Read the article on EUR-Lex](https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679#art_32) · Official text, quoted from the Official Journal of the EU