S.L. 595.37 Art. 9Data protection.    S.L. 586.08.

(1) Nothing in this order shall prejudice the provisions of the applicable data protection law.

(2) Any processing of personal data by the Agency in relation to the exercise of its functions, including any communication or transfer of personal data to other government agencies, departments and non-governmental organisations shall be strictly processed for the purpose of the provision of the voluntary service to the service users.

(3) The controller shall retain the personal data of the service users for a period not exceeding two (2) years from the date when the service has been terminated.

(4) Pursuant to article 3(2), any personal data relating to service users, held by the Malta Police Force, processed in accordance with the provisions of the Data Protection (Processing of Personal

Data by Competent Authorities for the purposes of the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties) regulations, shall be solely and strictly accessed by the deployed police officers in order to assess the risks and mitigation measures which may be required in relation to the provision of the service offered by the Agency.