Section 3-3.General supervision principles
Supervision pursuant to section 3-1 shall not unnecessarily disrupt the ordinary
operations of supervision subjects.
Information gathered by the supervisory authority may only be used in connection with
supervision and protective security work.
Section 3-4.Site access rights and duty to give notice of on-site
inspections
The supervisory authority may demand access to undertakings' information, information
systems, objects and infrastructure. Undertakings shall make relevant personnel available
during supervision to the extent necessary.
Written notice shall be given of on-site inspections. Supervision may nevertheless be
performed without notice if necessary for security-related reasons.
The King may issue regulations on on-site inspections.
Section 3-5.The supervisory authority's processing of personal data
The supervisory authority may process personal data if necessary to perform its tasks.
The processing of personal data must not constitute a disproportionate interference with
the right to privacy.
If possible, personal data shall be processed using the information systems of the
undertaking, without such data being copied or transferred to the supervisory authority.
The supervisory authority may nevertheless demand a copy of personal data if necessary
to document whether provisions of the act have been breached.
The King may issue regulations on the supervisory authority's processing of personal data.
Section 3-6.Instructions
The supervisory authority may instruct an undertaking to implement measures which are
necessary to achieve the purpose of the act. Instructions to implement specific measures
may only be issued if the costs inflicted on the undertaking appear reasonable relative to
what the measure may achieve.
If authorities with supervisory responsibility do not perform supervision in accordance
with requirements specified in or pursuant to the act, the National Security Authority may
issue instructions to perform such supervision.
Instructions pursuant to the first and second paragraphs may be appealed. The provisions
of Chapter VI of the Public Administration Act apply to the right of appeal of independent
natural or legal persons.
7/30