Mapping: 2017 Trust Services Criteria to GDPR

This mapping compares the requirements of the GDPR to the relevant categories within the 2017 Trust Services Criteria for Security, Availability, Processing Integrity, Confidentiality, and Privacy (includes March 2020 updates) (TSC).
The TSC are outcome-based criteria designed to be used when evaluating whether a system and related controls are effective to provide reasonable assurance of achieving the objectives that management has established for the system. To design an effective system, management first must understand the risks that may prevent the