The data controllers referred to in paragraphs 1 and 2 shall implement appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, accidental loss, alteration or unauthorised disclosure or access, in particular where the processing of such data involves their transmission over a network, and against all other unlawful forms of processing.
Déanfaidh na rialaitheoirí sonraí dá dtagraítear i mír 1 agus mír 2 bearta teicniúla agus eagraíochtúla iomchuí a chur chun feidhme chun sonraí pearsanta a chosaint in aghaidh scriosadh tionóisceach nó neamhdhleathach, cailleadh, athrú nó nochtadh nó rochtain neamhúdaraithe, go háirithe i gcás ina mbaineann próiseáil sonraí den sórt sin le hiad a tharchur thar líonra, agus in aghaidh aon fhoirmeacha neamhdhleathacha próiseála eile.