The competent authority shall exercise due care as a good administrator with regard to the information received in accordance with the previous paragraph and duly perform information security audit procedure. The maintenance, processing and use thereof shall be in accordance with the Personal Information Protection Act.