TOM

Technical and organisational measures (TOM) are a central component of data protection and data security law. TOM refers to the specific steps and precautions that organisations must take to adequately protect personal data. This includes technical security measures such as encryption, access controls and data backup, as well as organisational measures such as data protection guidelines, training and the implementation of data protection impact assessments. TOMs are designed to ensure that personal data is protected against unauthorised access, loss, destruction or other data breaches.