(q) exercising other legally established responsibilities. a) prevent unauthorised persons from entering the premises used for processing such data (control of entry to the premises); b) prevent data media from being read, copied, altered or removed by unauthorised persons (control of data media); c) prevent unauthorised input and unauthorised obtaining of knowledge, alteration or elimination of personal data input (control of input); d) prevent automatic data processing systems from being used by unauthorised persons by means of data transmission premises (control of use); e) guarantee that authorised persons may only access data covered by the authorisation (control of access); f) guarantee the checking of the bodies to whom personal data may be transmitted by means of data transmission premises (control of transmission); g) guarantee that it is possible to check a posteriori, in a period appropriate to the nature of the processing, the establishment in the regulations applicable to each sector of which personal data are input, when and by whom (control of input); h) in transmitting personal data and in transporting the respective media, prevent unauthorised reading, copying, alteration or elimination of data (control of transport). 2 – Taking account of the nature of the bodies responsible for processing and the type of premises in which it is carried out, the CNPD may waive the existence of certain security measures, subject to guaranteeing respect for the fundamental rights, freedoms and guarantees of the data subjects. 3 – The systems must guarantee logical separation between data relating to health and sex life, including genetic data, and other personal data. 4 – Where circulation over a network of the data referred to in articles 7 and 8 may jeopardise the fundamental rights, freedoms and guarantees of their data subjects the CNPD may determine that transmission must be encoded. 1 – This Act shall apply to the processing of personal data wholly or partly by automatic means, and to the processing other than by automatic means of personal data which form part of manual filing systems or which are intended to form part of manual filing systems. 2 – This Act shall not apply to the processing of personal data carried out by a natural person in the course of a purely personal or household activity. (a) in the context of the activities of an establishment of the controller on Portuguese territory; 4/20