S.L. 586.8 Art. 40Processing of communicated personal data. 27

(1) Personal data communicated by a competent authority to other government departments or to bodies established by law, or to other private parties, shall not be used for purposes other than those specified in the request for communication of personal data without the authorisation of the competent authority from which such personal data was made available or obtained.

(2) Where the recipient of personal data referred to in sub-FOR THE PURPOSES OF THE PREVENTION, INVESTIGATION, DETECTION OR PROSECUTION OF CRIMINAL OFFENCES OR THE

EXECUTION OF CRIMINAL PENALTIES regulation (1) requires such data for purposes other than those for which it was requested, the recipient shall submit a new request to the competent authority in accordance with regulation 35(1), and that data shall not be used by the recipient for purposes other than those included in the original request unless there is written authorisation.