Encrypt, pseudonymize, or anonymize personal data wherever possible.

Most of the productivity tools used by businesses are now available with end-to-end encryption built in, including email, messaging, notes, and cloud storage. The GDPR requires organizations to use encryption or pseudonymization whenever feasible.