Integrity and confidentiality means security. Data should be protected against unauthorised access, loss, or damage, using appropriate technical and organisational measures, which in practice includes basic operational maturity rather than magical encryption thinking - legislation.gov.uk 