When personal data is processed for the sole purpose of applying articles L. 561-5 to L. 561-23 by a person mentioned in article L. 561-2, the right of access is exercised with the Commission nationale de l’informatique et des libertés.
The Commission appoints one of its members who is or was a member of the Conseil d’Etat, the Cour de Cassation or the Cour des Comptes to carry out the necessary investigations and make the necessary changes. The latter may be assisted by a member of the Commission’s staff.
The data may be communicated to the applicant when the Commission, in agreement with the department referred to in Article L. 561-23 and after obtaining the opinion of the data controller, establishes that communication of the data is not likely to reveal the existence of a report as provided for in Article L. 561-15 or the action taken on it, or the exercise by the department referred to in Article L. 561-23 of its right to communicate. 561-23 of its right of communication provided for in Article L. 561-26, nor to call into question the purpose of combating money laundering and terrorist financing when the data relates to the applicant and is held as part of the implementation of the provisions of Articles L. 561-8, L. 561-9 and L. 561-10.
Where disclosure of the data is likely to call into question the purpose of the processing, the Commission Nationale de l’Informatique et des Libertés, to which the applicant has referred the matter, shall inform the applicant that the necessary checks have been carried out.