30. Transparency. — (1) The data fiduciary shall take reasonable steps to maintain transparency regarding its general practices related to processing personal data and shall make the following information available in an easily accessible form as may be specified— (a) (b) (c) (d) (e) (f) (g) (h) (2) 31. The data fiduciary shall notify the data principal of important operations in the processing of personal data related to the data principal through periodic notifications in such manner as may be specified. Security Safeguards.— (1) Having regard to the nature, scope and purpose of processing personal data undertaken, the risks associated with such processing, and the likelihood and severity of the harm that may result from such processing, the data fiduciaryand the data processor shall implement appropriate security safeguards including— (a) (b) (c) (2) 32. the categories of personal data generally collected and the manner of such collection; the purposes for which personal data is generally processed; any categories of personal data processed in exceptional situations or any exceptional purposes of processing that create a risk of significant harm; the existence of and procedure for the exercise of data principal rights mentioned in Chapter VI, and any related contact details for the same; the existence of a right to file complaints to the Authority; where applicable, any rating in the form of a data trust score that may be accorded to the data fiduciary under section 35; where applicable, information regarding cross-border transfers of personal data that the data fiduciary generally carries out;and any other information as may be specified by the Authority. use of methods such as de-identification and encryption; steps necessary to protect the integrity of personal data; and steps necessary to prevent misuse, unauthorised access to, modification, disclosure or destruction of personal data. Every data fiduciary and data processor shall undertake a review of its security safeguards periodicallyas may be specified and may take appropriate measures accordingly. Personal Data Breach.— (1) The data fiduciary shall notify the Authority of any personal data breach relating to any personal data processed by the data fiduciarywhere such breach is likely to causeharm to any data principal. 18