Article 28 Data Confidentiality Controllers, processors and persons who come to know the content of the processed data while exercising their duty, shall remain under obligation of confidentiality and credibility even after termination of their functions. These data shall not be disclosed save when otherwise provided by law. Everyone acting under the authority of the controller or the processor shall not process the personal data on which he/she has access, without the authorization f the controller, unless it is mandatory by law. CHAPTER VIII THE COMMISSIONER FOR THE PERSONAL DATA PROTECTION Article 29 The Commissioner 1. The Commissioner for the Protection of Personal Data is the independent authority in charge of supervising and monitoring the protection of personal data by respecting and guaranteeing the fundamental human rights and freedoms in compliance with the law. 2. The Commissioner is a public legal person. 3. Information ensured by the Commissioner while exercising his duties shall be used only for supervisory purposes in compliance with the legislation on the protection of personal data. The Commissioner shall remain under obligation of confidentiality even after termination of his functions. Article 30 The rights 1. The Commissioner has the right to: a) conduct an administrative investigation, have access to personal data processing and collect all necessary information with the view of fulfilling his supervisory obligations; 32 33