For electronic copies and electronic communications, the institution must take all reasonable steps to ensure that each communication can only be received or accessed by persons entitled to receive or access it, for example the staff and students of the education institution.