text: The contractor shall grant personnel access to the data to the extent strictly necessary for 
  the implementation, management and monitoring of the FWC. The contractor must ensure 
  that personnel authorised to process personal data has committed itself to confidentiality 
  or is under appropriate statutory obligation of confidentiality in accordance with the 
  provisions of Article II.8. 
  
  The contractor shall adopt appropriate technical and organisational security measures, 
  giving due regard to the risks inherent in the processing and to the nature, scope, context 
  and purposes of processing, in order to ensure, in particular, as appropriate: 
  
  (a) the pseudonymisation and encryption of personal data; (b) the ability to ensure the 
  ongoing confidentiality, integrity, availability and resilience of processing systems and 
  services; (c) the ability to restore the availability and access to personal data in a timely 
  manner in the event of a physical or technical incident; (d) a process for regularly testing, 
  assessing and evaluating the effectiveness of technical and organisational measures for 
  ensuring the security of the processing; (e) measures to protect personal data from 
  accidental or unlawful destruction, loss, alteration, unauthorised disclosure of or access to 
  personal data transmitted, stored or otherwise processed. 