A01 chaf6542 06 se fm indd

7 

Secure.

In full: ‘Appropriate technical and organisational measures shall be taken against unau‑

thorised or unlawful processing of personal data and against accidental loss or destruction 

of, or damage to, personal data.’

(Techniques for managing data security are discussed in Chapter 11.)

Of course, the cost of security measures will vary according to the level of security 

required. The Act allows for this through this provision:

(i) 

Taking into account the state of technological development at any time and the cost of 

implementing any measures, the measures must ensure a level of security appropriate to: 

(a) the harm that might result from a breach of security; and (b) the nature of the data to