1.EUCI shall be carried in such a way as to protect it from unauthorised disclosure during its carriage.
2.Carriage of EUCI shall be subject to the protective measures, which shall:
be commensurate with the level of classification of the EUCI carried, and
be adapted to the specific conditions of its carriage, in particular depending on whether EUCI is carried:
within a Commission building or a self-contained group of Commission buildings,
between Commission buildings located in the same Member State,
within the Union,
from within the Union to the territory of a third State, and
be adapted to the nature and form of the EUCI.
3.These protective measures shall be laid down in detail in implementing rules, or, in case of projects and programmes referred to in Article 42, as an integral part of the relevant Programme or Project Security Instructions (PSI).
4.The implementing rules or PSI shall include provisions commensurate with the level of EUCI, regarding:
the type of carriage, such as hand carriage, carriage by diplomatic or military courier, carriage by postal services or commercial courier services,
packaging of EUCI,
technical countermeasures for EUCI carried on electronic media,
any other procedural, physical or electronic measure,
registration procedures,
use of security authorised personnel.
5.When EUCI is carried on electronic media, and notwithstanding Article 21, paragraph 5, the protective measures set out in the relevant implementing rules may be supplemented by appropriate technical countermeasures approved by the Commission Security Authority so as to minimise the risk of loss or compromise.