Reconciling data protection and cybersecurity: An operational approach for business sector

This chapter aims at developing a joint analysis of the main EU directives and regulations on data protection and cybersecurity that play a relevant role in the daily business activities of many companies. Starting with the GDPR, we further examine other legal instruments that regulate crucial areas of data processing activities concerning digital payments, identification and network and information systems security. By taking a cross-cutting view focusing on the main building blocks of an operational approach to these legal instruments, this chapter highlights the relationships between the legal provisions and the associated technological and organisational measures, identifying the key organisational, legal and technical elements of the European approach to data protection and cybersecurity regulation in the business sector.