A proper physical and technical security system must be used to keep personal information safe and secure, and not be exposed to undue security risks.