Art. 21 is to the effect that: 

• Personal data obtained by the General administration of the state cannot  be communicated or given out unless it is for historic or, statistics of scientific purposes. However, personal data could be communicated between the public administration and other public organs or institutions.
• Private holders of personal data cannot communicate or give out personal data found in their possession unless by a court order instructed by a competent court.
• For the performance of any of the above, the holders of the data have to be notified of the purpose for which their data is to be communicated or given out.  Notwithstanding, consent will not be needed from the owner of the data unless the data was made available to the public, and it is likely to be communicated to other public or private files.