e. any other administrative authority; f. a body that is either owned or controlled by a public authority. 3. "control" means either possession of, or control of access to, information. 4. "personal information" means any information relating to a natural person who can be directly or indirectly identified by reference to factors such as but not limited to, an identification number or that person’s physical, mental, economic, ethnic, religious, cultural, or social identity. 5. "competent authority" means a public authority that has control of the requested information and is the authority by whom or for whom the information was brought into existence. If the latter cannot be determined, the competent authority shall be the public authority whose function most closely relates to the requested information. SECTION II ACCESS TO INFORMATION Article 4 Right of Access Every natural and legal person has the right to access information in the control of a public authority, and each public authority has a corresponding obligation to disclose such information. This right of access may only be subject to such formalities and restrictions as are prescribed by this Act. Article 5 Determination of an Exemption Requested information shall be determined to be exempt from disclosure on a case-bycase basis and only if a competent authority: a. claims an exemption under Articles 6, 7 or 8 for all or part of the information; and b. determines, upon applying the public interest test provided for in Article 9, that disclosure is not justified in the public interest. Article 6 Exemptions for Functions of Public Authorities A competent authority may claim an exemption where disclosure would reasonably be expected to cause substantial harm to the legitimate aim of the following in Bosnia and Herzegovina: