Supplier shall be responsible for the security management of personal data facilities. If the personal data is stored in a computer system, it is required to maintain the relevant computer equipments on a regular basis and periodically backup data to prevent data from being destroyed or lost.