Europol Public Information  iii. prevent the unauthorised input of  Personal data  and the unauthorised inspection, modification  or deletion of stored   (storage control);  iv. prevent the use of automated data-processing systems by unauthorised persons using data- communication equipment (user control);  v. ensure that persons authorised to use an automated data-processing system have access only  to data covered by their access authorisation (data access control);  vi. ensure that it is possible to verify and establish to which bodies  Personal data  may be or have  been transmitted using data-communication equipment (communication control);  vii. ensure that it is possible to verify and establish which  Personal data have been input into  automated data-processing systems and when and by whom the data were inputted (input  control);  viii. ensure that it is possible to verify and establish what  Personal data have been accessed by  which member of the  Contractor’s personnel  and at what time (access log);  ix. prevent the unauthorised reading, copying, modification or deletion of  Personal data during  transfers of  Personal data  or during the transportation of data media (transport control);  x. ensure that it is possible, in the event of interruption, to restore installed systems immediately  (recovery); and  xi. ensure that the occurrence of faults in the functions is immediately reported (reliability) and  that stored  Personal data  cannot be corrupted by system malfunctions (integrity).  7. The  Contractor  shall adopt appropriate technical and organisational security measures, having due  regard to the risks inherent in the processing and to the nature, scope, context and purposes of  processing, in order to ensure, in particular, as appropriate:  i. the pseudonymisation and encryption of  Personal data ;  ii. the ability to ensure the ongoing confidentiality, integrity, availability and resilience of  processing systems and services;  iii. the ability to restore the availability and access to  Personal data in a timely manner in the  event of a physical or technical incident;  iv. a process for regularly testing, assessing and evaluating the effectiveness of technical and  organisational measures for ensuring the security of the processing;  v. measures to protect  Personal data from accidental or unlawful destruction, loss, alteration,  unauthorised disclosure of or access to personal data transmitted, stored or otherwise  processed.  8. The  Contractor  shall assist the  Data controller  in the fulfilment of its obligations pursuant to Articles,  14 to 25 and 33 to 41 of Regulation (EU) 2018/1725 to:  i. respond to requests from persons whose  Personal data is processed in relation to the  Framework Contract , informing the  Data controller  without delay about such requests;  ii. ensure compliance with its data protection obligations regarding the security of the processing,  and the confidentiality of electronic communications and directories of users;  iii. notify a  Personal data breach  to the European Data Protection Supervisor;  iv. communicate a  Personal data breach without undue delay to the data subject, where  applicable;  Page 49 of 79  Europol’s initials:  Contractor’s initials: 