Cap. 636 Art. 9Restriction of the rights of the data subjects.  S.L. 586.08.      S.L. 586.08.

(1) The controller may restrict the rights and obligations provided for in Part III of the Data Protection (Processing of Personal

Data by Competent Authorities for the purposes of the Prevention,

Investigation, Detection or Prosecution of Criminal Offences or the Execution of Criminal Penalties) Regulations, where these restrictions are considered as a necessary and proportionate measure for the performance of the functions of the controller pursuant to this Act.

(2) The data protection officer shall be consulted by the controller in any case in a timely manner during the entire process of applying the restriction.

(3) The controller shall apply the restriction referred to in sub-article (1) for as long as the reasons justifying them remain applicable following a necessity and proportionality test. The reasons justifying the restrictions shall be documented and made available to the Information and Data Protection Commissioner, when and as required.

(4) Where the reasons for a restriction no longer apply, the controller shall lift the restriction and inform the data subject concerned accordingly and comply with the rights and obligations provided for in Part III of the Data Protection (Processing of Personal

Data by Competent Authorities for the purposes of the Prevention, Investigation, Detection or Prosecution of Criminal Offences or the Execution of Criminal Penalties) Regulations.

(5) The controller shall review the application of the restriction referred to in this article and depending on the outcome of said review inform the data subject accordingly.