Regulation 9 Data protection requirements
Where data protection legislation does not apply, the provider, when processing personal data in compliance with these Regulations must take steps to ensure appropriate security and confidentiality of the data.