Under GDPR Article 32 encryption and pseudonymisation are examples of what?

• A. Technical and organisational measures
• B. Legal grounds
• C. Data minimization techniques
• D. Public policy requirements

Answer: (A)

Under GDPR Article 32, the emphasis is on protecting personal data by applying appropriate security measures. Encryption and pseudonymisation are concrete safeguards that reduce the risk of unauthorized access or disclosure. Encryption turns data into unreadable form without the decryption key, so it’s useless if intercepted. Pseudonymisation replaces direct identifiers with pseudonyms, lowering identifiability even if data is exposed. Together they illustrate how technical and organizational measures are used to ensure a level of security appropriate to the risk. The other options don’t fit because legal grounds relate to the basis for processing, data minimization focuses on limiting data collected or retained, and public policy requirements are not specific security controls in GDPR.