Bottom line: IT security tools such as logging, access control and asset inventory are essential instruments for operationalizing and demonstrating compliance with data subject rights under GDPR.
IT security and data protection working together to efficiently implement data subject rights in accordance with GDPR. Existing security tools can be deployed in practice for information requests, deletion and restriction of processing.
The collaboration between IT security and data protection extends beyond mere protection of personal data. Security tools already present in organizations support the operational implementation of data subject rights under Articles 12–22 GDPR (right of access, right to erasure, right to restrict processing, right to data portability, right to object).
For information requests (Article 15 GDPR), IT security tools enable reliable asset inventory and data flow tracking. Logs and audit trails document which systems have processed personal data of which individuals – a prerequisite for providing complete information disclosures to data subjects within the 30-day deadline.
For the right to erasure (Article 17 GDPR), security tools assist in identifying and securely deleting records across all systems – including backups and archives. Similarly for restriction of processing (Article 18 GDPR): security mechanisms and access controls ensure that marked data is actually no longer actively processed.
Systematic exchange between IT security and data protection teams – through documented processes and clear interfaces – makes these synergies actionable and simultaneously reduces the risk of violating data subject rights or triggering fines.
Source: www.security-insider.de · Published 24 July 2026
Lumi AI News — AI-assisted curation pursuant to Art. 50 EU AI Act. Paraphrase and classification by Lumi News Pipeline v1.7.3.