Article 6 (Lawfulness of processing) identifies 'encryption or pseudonymisation' as 'appropriate safeguards' for protecting subjects' personal data. Article 32 (Security of processing) states that “the processor shall implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including inter alia as appropriate: (a) the pseudonymisation and encryption of personal data …' Article 34 (Communication of a personal data breach to the data subject) allows organisations suffering a data breach to avoid the communication requirement if they used encryption to 'render the personal data unintelligible to any person unauthorised to access it.'