Law No. 20 of 2014 Concerning Electronic Transactions Chapter Seven Privacy and Data Protection Article (32) In none of the causes authorized by law, governmental bodies, agencies, public institutions, companies, non-governmental bodied or employees thereof may not unlawfully access, disclose or publish any personal data or information registered in the records or systems of electronic processing related to positional affairs, personal status, health status or elements of the financial disclosure of persons or other personal information registered at the authorities referred to in this Article or employees thereof by virtue of their positions, unless such was done with the approval of the concerned person to which such data or information belong or his legal representative or by means of a reasoned judicial statement. The institutions referred to in the above paragraph of this article shall state the purpose of collecting the mentioned data and information. The collection of such data and information shall be carried out within the limits of this stated purpose. Article (33) Except for the personal data and information, which the government security bodies keep in its records and electronic processing systems for reasons of national security of the country, the person may request any of the above mentioned entities to access the personal data or information registered as set forth in the preceding article, if such information or data belong to him or any of his legal representatives. Hey may also obtain a formal extract of this data and information. The said bodies should respond his request. The Executive By-law of this law sets forth the procedures and controls which govern the individual’s access of such personal data and information. 22 Article (34) Without prejudice to the provisions of preceding articles, government bodies, specific natural person and individuals may obtain from the bodies set forth in Article (32) above whatever they need of the information registered in their own records or electronic processing systems. Such shall be obtained subject to the approval of the concerned body after the verification of the applicant’s status, nature of this data or information, usefulness or purpose of the same of