Requires data processing to take place under legally compliant SPE conditions, including controlled access, data permit enforcement, logging, output control, non-disclosure safeguards and secure closure of processing sessions.