Skip to content
cyberGDPR

09 · Art. 6(1)(f) · Rec. 49 · Area

Logging & monitoring

Security logs are full of personal data: IP addresses, usernames, URLs, email metadata. The GDPR does not forbid them; it asks for a lawful basis, proportionality, transparency and limited retention. This area covers SIEM, EDR, DLP and TLS inspection through that lens, and how good logging also proves compliance after a breach.

  1. Security Logging and Monitoring Under the GDPR

    How to run security logging, SIEM, EDR and DLP in line with GDPR: lawful basis, employee monitoring, retention periods, access control and field masking.