Such procedures shall take into account information security risk management and data protection by design and by default.
Pri takšnih postopkih se upošteva obvladovanje tveganja za varnost informacij in vgrajeno in privzeto varstvo podatkov.