Take all reasonably practicable steps to ensure that personal data are protected against unauthorised or accidental access, processing, erasure or other use;