S.L. 586.1 Art. 23Data security.

Data retained under this Part shall comply with the data security principles established under the Act and shall as a minimum -

(a) be of the same quality and subject to the same security and protection as the data on the network;

(b) be subject to appropriate technical and organisational measures to protect the data against accidental or unlawful destruction, accidental loss or alteration, or unlawful storage, processing, access or disclosure;

(c) be subject to appropriate technical and organisational measures to ensure that they can be accessed by specially authorised personnel only;

(d) except for such data as are the subject of a conservation order, be destroyed at the end of the applicable retention period.