Security Measures for Protection of Personal Data, Data Privacy Law
Responsibility of PICs and PIPs Section 25. Data Privacy and Security. Personal information controllers and personal information processors shall implement reasonable and appropriate organizational, physical, and technical security measures for the protection of personal data. The personal information controller and personal information processor shall take steps to ensure that any natural person acting under their…