Must ensure appropriate technical and organizational security measures to protect personal data from security incidents and for safe and confidential storage of personal data in accordance with previsto's.