S.L. 422.3 Art. 5Confidentialityand data protection.

(1) The processing of any information relating to an identified or identifiable natural person by the Office shall be subject to appropriate safeguards in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation). Those safeguards shall ensure that technical and organisational measures are in place in such a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage.

(2) The restrictions on use of information and prohibition of disclosure of information as provided for in articles 40 and 41 of the Act shall apply.