How should electronic data be stored securely?
Identifiable personal data in a database must be kept in a secure manner appropriate to the sensitivity of the information being stored. The data should be accessed only by authorised people using password protection. The data should be backed up regularly. Any database used within STH must be reported to the DPO using a STH Data Notification Form.