Technical and Organizational Measures (TOMs)

Technical and Organizational Measures (TOMs) are steps (measures) that an organization makes to become GDPR compliant and to remain GDPR compliant. This can mean using a new software (a technical measure) or create new processes within the organization (an organizational measure) to improve data security.

For example, using a Consent Management Platform (CMP) is a technical measure that helps protecting personal data.