You must implement the measures set out in articles 18.1 and 19 of Federal Law No. 152-FZ within your organization and each of its personal data processing systems.