must take reasonable steps to ensure that the operation of the Registry is secure from misuse, including use by those not entitled to use it;

may suspend the operation of the Registry or any account where it believes security of the Registry may be at risk by not doing so;

must ensure that information which relates to an account holder or a participant (other than information to which article 58 or 59 applies) is not accessible by another account holder or participant.