7. Appropriate technical and organisational measures….
Shall be taken against unauthorised or unlawful processing of personal data and against accidental loss, or destruction of, or damage to, personal data.
Computers password protected (inc laptops/organisers?)
Secure data storage areas?
Supplier security measures?