Page 35 Section VI: Obligations of the personal data processing official Chapter 1: Confidentiality obligations Article II – 47: Processing of personal data shall be confidential. Such processing shall be undertaken exclusively by persons operating under the authority of a data processing official and exclusively on the latter’s instruction. Chapter 2: Security obligations Article II – 48: The processing official shall take all such precautions as are necessary depending on the nature of the data, and in particular, prevent such data from being distorted or damaged or from being accessed by unauthorized third parties. Chapter 3: Conservation obligations Article II – 49: Personal data shall be conserved for a period set by a regulatory text and solely for the purposes for which they were obtained. Chapter 4: Sustainability obligations Article II – 50: The processing official shall take all appropriate measures to ensure that processed personal data can be utilized regardless of the technical device employed in the process. The processing official shall, in particular, ensure that technological changes do not constitute an obstacle to the said utilization. AU Draft0 010111

Select target paragraph3