Each agency shall take all reasonable precautions to protect personal data from fire, theft, flood, natural

disaster, unauthorized removal or other security hazard.