Recommendation R(91) 10 on the communication to third parties of personal data held by public bodies
(Adopted by the Committee of Ministers on 9 September 1991 at the 461st meeting of the Ministers' Deputies)
The communication, in particular by electronic means, of personal data or personal data files by public bodies to third parties should be carried out with respect to privacy and should be regulated by domestic law provisions. Sensitive data should not be stored in a file or in part of a file accessible to third parties. In case of communication of personal data or personal data files by public bodies to third parties the communication should be accompanied by safeguards and guarantees designed to ensure that the privacy of the data subject is not unduly prejudiced. In particular, the communication of personal data or personal data files to third parties should not take place unless:
The communication, in particular by electronic means, of personal data or personal data files by public bodies to third parties should be carried out with respect to privacy and should be regulated by domestic law provisions. Sensitive data should not be stored in a file or in part of a file accessible to third parties. In case of communication of personal data or personal data files by public bodies to third parties the communication should be accompanied by safeguards and guarantees designed to ensure that the privacy of the data subject is not unduly prejudiced. In particular, the communication of personal data or personal data files to third parties should not take place unless:
- a specific law so provides; or
- the public has access thereto under legal provisions governing access to public-sector information; or
- the communication is in conformity with domestic legislation on data protection; or
- the data subject has given his free and informed consent.


