12. Accountability in the processing of personal data

establishes and maintains duly catalogued records to demonstrate the manner in which the implementation of the data protection obligations referred to in sections 5, 6, 7, 8, 9, 10 and 11 are carried out by the controller;

is designed on the basis of structure, scale, volume and sensitivity of processing activities of the controller;

provides for appropriate safeguards based on data protection impact assessments specified in section 24;

is integrated into the governance structure of the controller;

establishes internal oversight mechanisms;

has a mechanism to receive complaints, conduct of inquiries and to identify personal data breaches;

is updated based on periodic monitoring and assessments; and

facilitates the exercise of rights of data subjects under sections 13, 14, 15, 16 and 18, for the purpose of complying with the obligations referred to in sections 5, 6, 7, 8, 9, 10 and 11.