It should instead focus on ensuring that data processing safeguards the right to processing. Industry codes of conduct and company certifications provide companies the flexibility to best fit implementation to policy requirements. Enforcement should focus essentially on increasing data breach detection rates in order to foster a culture of prevention.
Data protection
Data protection regulation should define neither the technology nor the means used for the collection and processing of the personal data.