Security practices

(a) In general Any controller or processor in custody or possession of agricultural data shall establish, implement, and maintain reasonable administrative, technical, and physical data security practices to protect the confidentiality, integrity, and accessibility of that agricultural data. (b) Requirements Security practices described in subsection (a)— (1) shall be appropriate for the volume and nature of the agricultural data; and (2) shall protect against unauthorized access, use, disclosure, modification, or loss.