19. Security measures on integrity and confidentiality of personal information
20. Information processed by operator or person acting under authority
21. Security measures regarding information processed by operator
22. Notification of security compromises
