(ii) the alteration of; (iii) the disclosure of; (iv) the accidental loss of; and (v) the destruction of, the data in his control; and (b) ensure that the measures provide a level of security appropriate for – (i) the harm that might result from – (A) the unauthorised access to; (B) the alteration of; (C) the disclosure of; (D) the destruction of, the data and its accidental loss; and (ii) (2) (a) the nature of the data concerned. The measures referred to in subsection (1) shall include – (i) the pseudonymisation and encryption of personal data; (ii) the ability confidentiality, to ensure ongoing availability and resilience of processing systems and services; integrity, the