S.L. 528.11 Art. 7Appropriate safeguards.

(1) The Directorate shall take into account the nature, scope, context and purposes of processing as well as the risks of varying likelihood and severity for the rights and freedoms of the concerned applicants, both at the time of the determination of the means for processing and at the time of the processing itself, and it shall implement appropriate technical and organisational measures, in an effective manner and to integrate the necessary safeguards into the processing, and this in order to protect the rights of the concerned individuals and to ensure a level of security appropriate to the risk.

(2) The data protection officer appointed by the Directorate in accordance with Article 37 of Regulation No 2016/679 shall be involved and consulted in a timely manner on all issues in relation to the protection of personal data processed for the purposes of these regulations.

(3) For the purpose of ensuring and to be able to demonstrate that the processing of data is performed in accordance with Regulation No 2016/679, the Directorate shall implement the appropriate data OF HEALTH CARE FEES)

protection policies, which policies shall be periodically reviewed and updated where necessary.