AIIA will implement and maintain all appropriate technical, physical and organisational security and confidentiality measures as required by all relevant laws and as necessary to protect against unauthorised or unlawful processing of your data and against accidental loss, alteration, disclosure or destruction of, misuse of, or damage to, your data held or processed by or on behalf of you, and to take all reasonable steps to ensure the reliability of any or all AIIA staff who have access to or are responsible for the processing of your data including, where required by relevant laws, appointing and instructing AIIA staff in writing to process your data only under the authority and responsibility of AIIA’s CEO. 

AIIA will process your data only as necessary to fulfil its contractual obligations and will destroy the data after the expiration of two years from the commencement of the Agreement. 

AIIA will document, implement and maintain such processes and systems as are necessary to process your data in compliance with all relevant laws.