Section 3-3.General supervision principles Supervision pursuant to section 3-1 shall not unnecessarily disrupt the ordinary operations of supervision subjects. Information gathered by the supervisory authority may only be used in connection with supervision and protective security work. Section 3-4.Site access rights and duty to give notice of on-site inspections The supervisory authority may demand access to undertakings' information, information systems, objects and infrastructure. Undertakings shall make relevant personnel available during supervision to the extent necessary. Written notice shall be given of on-site inspections. Supervision may nevertheless be performed without notice if necessary for security-related reasons. The King may issue regulations on on-site inspections. Section 3-5.The supervisory authority's processing of personal data The supervisory authority may process personal data if necessary to perform its tasks. The processing of personal data must not constitute a disproportionate interference with the right to privacy. If possible, personal data shall be processed using the information systems of the undertaking, without such data being copied or transferred to the supervisory authority. The supervisory authority may nevertheless demand a copy of personal data if necessary to document whether provisions of the act have been breached. The King may issue regulations on the supervisory authority's processing of personal data. Section 3-6.Instructions The supervisory authority may instruct an undertaking to implement measures which are necessary to achieve the purpose of the act. Instructions to implement specific measures may only be issued if the costs inflicted on the undertaking appear reasonable relative to what the measure may achieve. If authorities with supervisory responsibility do not perform supervision in accordance with requirements specified in or pursuant to the act, the National Security Authority may issue instructions to perform such supervision. Instructions pursuant to the first and second paragraphs may be appealed. The provisions of Chapter VI of the Public Administration Act apply to the right of appeal of independent natural or legal persons. 7/30

Select target paragraph3