Article 9 1.

Member States shall take the necessary technical and organisational measures in accordance with applicable Union and national law in order to protect RIS information and records against untoward events or misuse, including improper access, alteration or loss, and to ensure the confidentiality of commercial and other sensitive information exchanged pursuant to this Directive.