All practicable steps shall be taken to ensure that personal data 
(including data in a form in which access to or processing of the data 
is not practicable) held by a data user are protected against 
unauthorized or accidental access, processing, erasure or other use 
having particular regard to— 
        (a) the kind of data and the harm that could result if any of  
            those things should occur 
        (b) the physical location where the data are stored; 
        (c) any security measures incorporated (whether by automated  
            means or otherwise) into any equipment in which the data are  
            stored; 
        (d) any measures taken for ensuring the integrity, prudence and  
            competence of persons having access to the data, and 
        (e) any measures taken for ensuring the secure transmission of  
            the data.