Security of transferred information
Security of stored information
Security of information held by third parties
Retaining confidential information
Proportionality of safeguards
Periodic review and reassessmen