10. Obligation to maintain Integrity and confidentiality

Every controller shall ensure integrity and confidentiality of personal data that is being processed, by using appropriate technical and organizational measures including encryption, pseudonymisation, anonymisation or access controls or such other measures as may be prescribed so as to prevent the –

unauthorized or unlawful processing of personal data; or

loss, destruction or damage of personal data.