Personal data may only be disclosed under certain specific conditions. Among other things, personal data can be disclosed if one of the following conditions is met:
- The data subject has given consent to the disclosure of the personal data for one or more specific purposes.
- The disclosure is necessary to fulfill a legal obligation (for example, law, regulation, government decision or collective agreement).
- The disclosure is necessary for purposes relating to a legitimate interest of the registrar, the person requesting it, or another third party and the data subject's interests or fundamental rights and freedoms do not weigh heavier (balance of interests).
If the information is disclosed, it is important that as few personal data as possible be disclosed. Thus, some form of data minimization is required.
