J. S. Vanegas, “Breach of security requirements under Article 32 of GDPR”, RIID, vol. 2, no. 2, pp. 5–14, Oct. 2020, doi: 10.32091/RIID0020.