The collection, modification, consultation, communication, including transfers, and deletion of personal data and information are recorded. Recorded consultation and communication operations establish the identifier of the author, the date, the time, the reason for the operation and, where applicable, the recipients of the data. This information is kept for three years.