The GDPR is the first text to impose specific cybersecurity obligations on all organisations, which are subject to the investigatory and enforcement powers of an administrative authority such as the CNIL.
26 March 2024