■ Appropriate technical and organisational measures shall be taken against unauthorised or unlawful processing of personal data and against accidental loss or destruction of, or damage to, personal data.

For each of the principles stated above, describe what the company must do to comply with them. (6)

AQA June 2002 ICT1