Skip to content
Cyber Compliance

DORA → GDPR crosswalk

A control-by-control mapping between Digital Operational Resilience Act (EU 2022/2554) and General Data Protection Regulation (EU 2016/679). 5 mappings.

DORAGDPRRelationshipNotes
Art. 12
Backup policies and recovery procedures
Art. 32
Security of processing
RelatedCurated
Backup & recovery
Art. 17
ICT-related incident management process
Art. 33
Notification of a personal data breach to the supervisory authority
RelatedCurated
Incident response & breach notification
Art. 19
Reporting of major ICT-related incidents
Art. 33
Notification of a personal data breach to the supervisory authority
RelatedCurated
Incident response & breach notification
Art. 6
ICT risk management framework
Art. 25
Data protection by design and by default
RelatedCurated
Governance & security policy
Art. 9
Protection and prevention
Art. 32
Security of processing
PartialCurated
Cryptography & data protection

Mappings marked “Official” derive from standards-body informative references; “Curated” mappings are authored by Cyber Compliance and provided for guidance only.