The information systems operated by the Authority to store its data, including confidential and personal data shall be designed to a high level of security appropriate to the security risks at stake, taking into account Articles 39 to 39f of this Regulation.
Ameti hallatavad infosüsteemid, kus säilitatakse ameti andmeid, sealhulgas konfidentsiaalseid ja isikuandmeid, projekteeritakse nii, et nad vastaksid turvalisuse kõrgele tasemele, mis on asjakohane olemasolevate turvariskide puhul, ning võttes arvesse käesoleva määruse artikleid 39-39f.