Personal data held by data users or in respect of which services are provided by persons carrying on computer bureaux
8Appropriate security measures shall be taken against unauthorised access to, or alteration, disclosure or destruction of, personal data and against accidental loss or destruction of personal data.