PART 4Intelligence services processing
CHAPTER 2Principles
The data protection principles
91The sixth data protection principle
1
The sixth data protection principle is that personal data must be processed in a manner that includes taking appropriate security measures as regards risks that arise from processing personal data.
2
The risks referred to in subsection (1) include (but are not limited to) accidental or unauthorised access to, or destruction, loss, use, modification or disclosure of, personal data.