# GDPR Art.32

URL: /systems/trust-and-governance/criteria/gdpr/art-32 · Id: `criterion:gdpr:Art.32`

> Controllers and processors implement security appropriate to the risk, including encryption, resilience and regular testing.

Controllers and processors implement security appropriate to the risk, including encryption, resilience and regular testing.

| Property | Value |
| --- | --- |
| Framework | GDPR |
| Reference | `Art.32` |
| Satisfied by | [Namespace isolation](/systems/trust-and-governance/controls/namespace-isolation), [Encryption](/systems/trust-and-governance/controls/encryption) |