(1) The Bank shall store the records referred to in Regulation 19 in a confidential and secure system.
(2) Access to the system referred to in paragraph (1) shall be subject to restrictions ensuring that the data stored therein is only available to staff members of the Bank for whom access to that data is necessary to perform their professional duties.