When configuring information systems for the communication and transport of personal data, an organization should:

Reference: https://www.vonage.com/resources/articles/gdpr-means-customer-communications/

When configuring information systems for the communication and transport of personal data, an

organization should review configuration settings for compliance with privacy regulations and

standards. This means that the organization should ensure that the configuration settings are aligned

with the privacy principles and requirements that apply to the data being communicated or

transported, such as data minimization, purpose limitation, consent, encryption, pseudonymization,

anonymization, etc. The organization should also document and monitor the configuration settings

and perform regular audits and reviews to verify their effectiveness and compliance. Reference: :

CDPSE Review Manual (Digital Version), page 151