What does the need-to-know principle mean?<\/strong><\/p>\n The need-to-know principle, also known as the necessity principle, describes the fact that every employee in a responsible body only receives the information relevant to them that they need to fulfill their respective tasks. It therefore represents an important TOM for achieving an appropriate level of security (Art. 32 para. 1 GDPR), because it prevents the unnecessary dissemination of information and limits the restriction of access to the necessary minimum. For example, the fewer people have access to certain personal data (because they do not need it), the lower the risk of data breaches. The need-to-know principle is put into practice with the help of a user rights concept, for example.<\/p>\n When processing data, the company observes the need-to-know principle by only collecting necessary data and providing transparent information about its use.<\/p>","protected":false},"excerpt":{"rendered":" The need-to-know principle, also known as the necessity principle, describes the fact that every employee in a responsible body only receives the information relevant to them that they need to fulfill their respective tasks. It therefore represents an important TOM for achieving an appropriate level of security (Art. 32 para. 1 GDPR), because it prevents the unnecessary dissemination of information and limits the restriction of access to the necessary minimum. For example, the fewer people have access to certain personal data (because they do not need it), the lower the risk of data breaches. The need-to-know principle is put into practice with the help of a user rights concept, for example.<\/p>","protected":false},"author":1,"featured_media":0,"menu_order":0,"template":"","meta":{"footnotes":""},"class_list":["post-41268","glossary","type-glossary","status-publish","hentry"],"yoast_head":"\nPractical example<\/h2>\n