CHAPTER VII OBLIGATIONS OF THE PERSONAL. DATA CONTROLLER ArtiCle 42: Obligations of confidentiality Processing of personal data shall be confidential. It shall be carried out exclusively by persons acting under the authorFty of the data controller and solely upon his instructions Article 43: Obligations of Security The data controller shall take all necessary precautions in relation to the nature of data, and in particular to ensure that it is not deformed, damaged or accessible to unauthorised third parties. Article 44: Obligations of Preservation Personal data shall be kept for a period of time set by a regulatory text and only for the purposes for which they were obtained. Article 45: Obligations of Durability 1) The data controller shall take all the necessary measures to ensure that the personal data processed can be utilised, no matter the technical medium. 2) He shall particularry ensure that technological development does not constitute an obstacle to such utilisation. CHAPTER VIJI FtNAL PROVISIONS Article 46: Amendment and reView 1) Any Member State. the Council of Ministers and the ECOWAS Commission may submit proposals for the amendment and review of this Supplementary Act. 2) All amendment and revision proposals shall be submftted to the ECOWAS Commission for onward communication to the Member States no more than thirty (30) days after reception. The Council of Ministers Shall examine the amendment - 16-