The three terms Confidentiality, Integrity and Availability are parts of an information security framework used to analyse the risks associated with data processing.  The framework is used in most risk assessment frameworks, and the wording of Article 32(1)(a) hints to us that we need to do a risk assessment. Confidentiality means that information must be protected against unauthorised access or disclosure so that it cannot be made known to unauthorised parties. This may involve, for example, protection against hackers or avoiding sending e-mails to the wrong recipients. Availability refers to the protection of information against unauthorised access by persons who have the right to access it. If you cannot access personal data in your online bank, for example, this can have negative consequences for you – you may not be able to pay a bill on time. Integrity refers to protecting information from unauthorised modification or destruction. The information must be accurate, as this is the basis for processing data, e.g. if errors are made in the payment of wages, an employee may risk missing or losing their pay.