1. لطیف زاده، مهدیه، قبولی درافشان، سیدمحمد مهدی، محسنی، سعید، عابدی، محمد،(1402)، تعهدات پردازش کننده داده شخصی در اتحادیه‌اروپا و امکان سنجی پذیرش آن در حقوق ایران، فصلنامه آموزه‌های فقه مدنی، دوره 16، شماره 27، صص 245-286
2. لطیف زاده، مهدیه،(1401)، رفع تقابل بین حق آزادی بیان و اطلاعات با حق بر داده‌های‌شخصی در رسانه‌ها از منظر حقوق اتحادیه‌اروپا و نظام‌حقوقی ایران، فصلنامه پژوهش‌های ارتباطی، دوره 29، شماره 111، صص 153-173.

ب) منابع خارجی

3. Aepd, (Last visited 13/07/2023), Risk Management and Impact Assessment in the Processing of Personal Data, Online Edition: https://www.aepd.es/es/documento/risk-management-and-impact-assessment-in-processing-personal-data.pdf, pp 1-160
4. Ales Teska , (Last visited 13/07/2023), Pseudonymization, Anonymization, Encryption ... what is the difference?, https://teskalabs.com/blog/data-privacy-pseudonymization-anonymization-encryption,
5. Care Quality Commission, (Last Visited 24/08/2023), Serious misconduct or mismanagement, https://www.cqc.org.uk/guidance-providers/regulations-enforcement/serious-misconduct-or-mismanagement,
6. EU, (Last Visited 19/08/2023), Technical and organisational measures, https://data2.eu/en/gdpr/what-technical-and-organisational-measures-do-we-need-to-take
7. Data Protection Commission, (Last Visited 18/07/2023), Risk based approach, https://www.dataprotection.ie/en/organisations/know-your-obligations/risk-based-approach
8. Enisa, (Last Visited 16/08/2023), Handbook on Security of Personal Data Processing, European Union Agency For Network and Information Security, online edition enisa.europa.eu
9. eu, (Last Visited 28/02/2023), Everything you need to know about the GPDR Data Protection Officer (DPO), https://gdpr.eu/data-protection-officer/.

10. GDPR, (Last Visited 04/08/2023), What is a GDPR Data Protection Officer and who needs to appoint one?, https://www.gdpreu.org/the-regulation/key-concepts/data-protection-officer/.
11. Hintze, Mike,(2018), “Data Controllers, Data Processors, and the Growing Use of Connected Products in the Enterprise: Managing Risks, Understanding Benefits, and Complying with the GDPR”, Journal of Internet Law (Wolters Kluwer), https://ssrn.com/ =3192721
12. Intersoft Consulting, (Last visited 04/07/2023), General Data Protection Regulation (GDPR), https://gdpr-info.eu/art-40-gdpr/
13. Joshua Gresham , (Last Visited 27/07/2023), Is encrypted data personal data under the GDPR?, https://iapp.org/news/a/is-encrypted-data-personal-data-under-the-gdpr/
14. LegalVision, (Last Visited 05/06/2023), Employee Ordinary Misconduct vs Serious and Gross Misconduct in the UK, https://legalvision.co.uk/employment/ordinary-gross-misconduct/
15. Marie Prokopets, (Last Visited 15/05/2023), The Ultimate Manual To GDPR Article 32, https://nira.com/gdpr-article-32/
16. National Privacy Commission, (Last Visited 04/05/2023), APPOINTING A DATA PROTECTION OFFICER, https://privacy.gov.ph/appointing-a-data-protection-officer/
17. Office of the Data Protection Ombudsman, (Last Visited 02/04/2023), Risk assessment and data protection planning, https://tietosuoja.fi/en/risk-assessment-and-data-protection-planning,
18. Personal Data Protection Commission, (Last Visited 22/07/2023), Data Protection Officers, https://www.pdpc.gov.sg/overview-of-pdpa/data-protection/business-owner/data-protection-officers,
19. Roy Winkelman, (Last visited 18/07/2023), Director, What is a Network?, Florida Center for Instructional Technology College of Education, University of South Florida, https://fcit.usf.edu/network/chap1/chap1.htm,
20. Satori, (Last Visited 13/07/2023), Pseudonymisation: 9 Ways to Protect Your PII, https://satoricyber.com/data-masking/pseudonymisation-9-ways-to-protect-your-pii/
21. Securiti, (Last Visited 12/03/2023), Article 32 Of The GDPR: Explained, https://securiti.ai/blog/gdpr-article-32/
22. The European Union Agency for Cybersecurity, (Last Visited 02/04/2023), Evaluating the level of risk for a personal data processing operation, https://www.enisa.europa.eu/risk-level-tool/risk
23. Thomas Zerdick, (Last visited 31/07/2023), Pseudonymous data: processing personal data while mitigating risks, https://edps.europa.eu/press-publications/press-news/blog/pseudonymous-data-processing-personal-data-while-mitigating_en.

van der Sloot, Bart,(2017) ‘Do Privacy and Data Protection Rules Apply to Legal Persons and Should They? A Proposal for a Two-tiered System’, Computer Law and Security Review, Volume 13, Issue 8, pp 18-34