Skip to content
Cyber Compliance

DORA → GDPR crosswalk

A control-by-control mapping between Digital Operational Resilience Act (EU 2022/2554) and General Data Protection Regulation (EU 2016/679). 5 mappings.

DORAGDPRRelationshipNotes
Art. 12
Backup policies and recovery procedures
Art. 32
Security of processing
RelatedCurated
Sauvegarde et restauration
Art. 17
ICT-related incident management process
Art. 33
Notification of a personal data breach to the supervisory authority
RelatedCurated
Réponse aux incidents et notification des violations
Art. 19
Reporting of major ICT-related incidents
Art. 33
Notification of a personal data breach to the supervisory authority
RelatedCurated
Réponse aux incidents et notification des violations
Art. 6
ICT risk management framework
Art. 25
Data protection by design and by default
RelatedCurated
Gouvernance et politique de sécurité
Art. 9
Protection and prevention
Art. 32
Security of processing
PartialCurated
Cryptographie et protection des données

Mappings marked “Official” derive from standards-body informative references; “Curated” mappings are authored by Cyber Compliance and provided for guidance only.