This guidance describes a set of technical security outcomes that are considered to represent appropriate measures under the GDPR.