Chapter IX TRANSITIONAL PROVISIONS AND FINAL PROVISIONS Article 38 Data security and data protection Member States shall take all appropriate measures to ensure the security of transmitted personal data and in particular to avoid unlawful or unauthorised access or disclosure , alteration or loss of personal data processed .