OBLIGATIONS OF USERS WITH ACCESS TO PERSONAL DATA
•Access only the data necessary for the performance of their work duties.
•Do not destroy or alter data without authorization.
•Do not copy or disclose data to third parties without authorization.
•Report and correct errors in data.
•Safeguard and do not disclose the assigned username and password. These credentials
must not be used outside the company’s premises.
•Do not transmit data over the Internet without authorization.
•In customer service departments, do not disclose personal data without authorization.
In all cases, verify the identity of the person requesting the data.
•If documents are printed on paper, do not allow access by unauthorized persons.
For more information here