These comprehensive AWS technical and organizational measures are consistent with the goals of the PDPA to protect personal data. Customers using AWS services maintain control over their content and are responsible for implementing additional security measures based on their specific needs, including content classification, encryption, access management and security credentials.