The National Security Authority shall in consultation with sector authorities and other relevant authorities ensure the establishment of necessary forums for the exchange of information and experience. The King may issue regulations on the exchange of threat assessments and other security information. Section 2-4.Response function and warning system for digital infrastructure The King will appoint an authority to operate a national response function for serious cyberattacks and a national warning system for digital infrastructure. When necessary for the performance of tasks pursuant to the first paragraph, this authority may process personal data in the form of a) metadata on ICT traffic to and from undertakings which are connected to the national warning system for digital infrastructure b) information which is required for analysis of triggered alarms in the warning system c) IP addresses received from national and international partners d) logs and infected hardware when necessary to assist an undertaking in its handling of serious cyberattacks and the undertaking consents to this. When strictly necessary for the performance of tasks pursuant to the first paragraph, other personal data than specified in the second paragraph may also be processed. The processing of personal data and interference with the right to privacy shall not be more extensive than necessary to achieve the purpose. The King may issue regulations on the national response function and the national warning system for digital infrastructure. Section 2-5.Decisions in response to a risk of harm to national security interests The King in Council may make necessary decisions to prevent activities which present a threat to security or other planned or ongoing activities which may present a not insignificant risk of a threat to national security interests. Such a decision may be made without regard to the restrictions in section 35 of the Public Administration Act, and regardless of whether an activity is permitted under another act or decision. Before a decision is made, advisory opinions should be obtained from relevant bodies with expertise in the relevant specialist area. 5/30