The service provider must ensure that the premises, facilities and equipment are suitable for the service, having regard to the statement of purpose for the service.

The service provider must ensure that the premises used for the operation of the service have adequate facilities for the secure storage of records.