Article 22 Content of notification CHAPTER VI NOTIFICATION Article 21 Responsibility to notify 1. Every controller shall notify the Commissioner about the processing of personal data for which he is responsible. The notification shall be made before the controller processes the data for the first time, or when a change of the processing notification status is required, under Article 22 of this law. 2. The processing of personal data the sole purpose of which is to keep a record, which in accordance with the law or sub-legal acts provides information for the public in general, is exempted from the obligation to notify the processing of data. 3. Data that are processed for the purpose of protection of the constitutional institutions, interests of national security, foreign policy, economic or financial interests of the state, prevention or prosecution of the criminal offences are exempted from the obligation to notify. 4. Other cases on which notification is not necessary are established under a decision of the Commissioner. The notification shall contain the following: a) name and address of the controller; b) purposes of processing of personal data; c) categories of data subjects and the categories of the personal data; ç) recipients and the categories of recipients of the personal data; d) the proposal on the internacional transfer that the controller aims to carry out; dh) a general description of the measures for the security of personal data. Article 23 Examination procedure The Commissioner examines all notifications and when a notification is insufficient the Commissioner shall order the controller to complete the notification content specifying a given deadline. If the controller does not complete the content of the notification within the given deadline, the notification shall be considered as not executed. Article 24 Prior checking 1. Authorization by the Commissioner is required for: a) processing of sensitive data in accordance with Article 7, item 2, letter ‘c’ herein; 26 27