Article 12, Informational self-determination: the article 39 of the regulation 2016/679 ensures this right. In terms that are more precise enough to guarantee that they will be respected.
Article 13, data security: Article 39 of the regulation 2016/679 protects the personal data « Personal data should be processed in a manner that ensures appropriate security and confidentiality of the personal data, including for preventing unauthorised access to or use of personal data and the equipment used for the processing. »
At the same time, Article 40 of the regulation 2016/679 ensures data security as it guarantees consent of data processing « In order for processing to be lawful, personal data should be processed on the basis of the consent of the data subject concerned or some other legitimate basis, laid down by law, either in this Regulation or in other Union or Member State law as referred to in this Regulation, including the necessity for compliance with the legal obligation to which the controller is subject or the necessity for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract. »