SCHEDULES
SCHEDULE 1The data protection principles
Part IThe principles
7Appropriate technical and organisational measures shall be taken against unauthorised or unlawful processing of personal data and against accidental loss or destruction of, or damage to, personal data.