Recital 32 Without prejudice to the GDPR

This Regulation should be without prejudice to Regulation (EU) 2016/679 of the European Parliament and of the Council(¹⁷)Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ L 119, 4.5.2016, p. 1)., including to provisions relating to the establishment of data protection certification mechanisms and of data protection seals and marks, for the purpose of demonstrating compliance of processing operations by controllers and processors with that Regulation. Such operations could be embedded in a product with digital elements means a software or hardware product and its remote data processing solutions, including software or hardware components being placed on the market separately;. Data protection by design and by default, and cybersecurity means cybersecurity as defined in Article 2, point (1), of Regulation (EU) 2019/881; in general, are key elements of Regulation (EU) 2016/679. By protecting consumers means a natural person who acts for purposes which are outside that person’s trade, business, craft or profession; and organisations from cybersecurity risks means the potential for loss or disruption caused by an incident and is to be expressed as a combination of the magnitude of such loss or disruption and the likelihood of occurrence of the incident;, the essential cybersecurity means cybersecurity as defined in Article 2, point (1), of Regulation (EU) 2019/881; requirements laid down in this Regulation are also to contribute to enhancing the protection of personal data means personal data as defined in Article 4, point (1), of Regulation (EU) 2016/679; and privacy of individuals. Synergies on both standardisation and certification of cybersecurity means cybersecurity as defined in Article 2, point (1), of Regulation (EU) 2019/881; aspects should be considered through the cooperation between the Commission, the European standardisation organisations, the European Union Agency for Cybersecurity means cybersecurity as defined in Article 2, point (1), of Regulation (EU) 2019/881; (ENISA), the European Data Protection Board established by Regulation (EU) 2016/679, and the national data protection supervisory authorities. Synergies between this Regulation and Union data protection law should also be created in the area of market surveillance and enforcement. To that end, national market surveillance authorities means a market surveillance authority as defined in Article 3, point (4), of Regulation (EU) 2019/1020; designated under this Regulation should cooperate with authorities supervising the application of Union data protection law. The latter should also have access to information relevant for accomplishing their tasks.