Artikel 47

1. The Members and the Secretary General shall be responsible for the implementation of all necessary measures for the security of the central automated information system. The objectives of these measures shall include, but not be limited to:
(i) preventing unauthorized access to equipment used for the processing of information in the system;
(ii) preventing unauthorized access to the system;
(iii) preventing unauthorized entry, reading, copying, amending or deletion of any information in the system;
(iv) ensuring that it is possible to check and establish which designated competent authorities and Organization officials, referred to in paragraph 1 of Article 52 of this Agreement, have access to the central automated information system, and which designated officials and Organization officials, referred to in paragraph 2 of Article 52 of this Agreement, have access to the information in the system;
(v) ensuring that it is possible to check and establish which information has been introduced into the system, by whom, and to monitor queries; and
(vi) preventing the unauthorized reading, copying, amendment or deletion of information during the communication of data and the transport of data media.
2. Independent representatives appointed by the management team shall carry out verifications of access to and queries about personal data to ensure that access and queries made were admissible and were made by authorized users. A record of all verifications shall be maintained in the system for reporting to the management team and deleted after twelve months.