• 2BAdviceAilance
• 0 Comments
• 8982 Views

Need-to-know principle

What does Need-to-know principle?

The Need-to-know principle (meaning: knowledge only if necessary), also known as the necessity principle, describes the fact that every employee in a responsible body only receives the information relevant to them that they need to fulfill their respective tasks. It therefore represents an important TOM for achieving an appropriate level of security (Art. 32 para. 1 GDPR), because this prevents the unnecessary dissemination of information and restricts access to it to the necessary minimum. The fewer people have access to certain personal data The fewer people who have access (because they don't need it), the lower the risk of data breaches. The "need-to-know" principle is put into practice, for example, through a user rights policy.

Practical example

With the Processing of data, the company takes into account the principle of Need-to-know principleby collecting only necessary data and providing transparent information about its use.