5} the period of preservation of the processed data; 6} the officers} responsible for executing the processing, as well as the categories of persons who, by virtue of their functions or for service requirements, have direct access to the recorded data.; 7) the recipients to whom such data may be disclosed; 8} the function of the person or department to wtlOm application shall be made for right of access; 9} the steps taken to ensure the security of the processing and of the data; 10)an indication that the data is processed by a data processor; 11)where personal data is expected to be transferred to third countries that are not members of ECOWAS or UEMOA, subject to reciprocity. Article 8: Deadline The data protecl1on Authority shall give its opinion within a set period of time starting from the date of receipt of the request for opinion or authOrisation. Nevertheless, this period of time mayor may no! be extended, on the basis of a reasoned deciSion of the data protection Authority. Article 9: Medium for the opinion or request for notification The opinion or notification or request for authorisation may be sent to the data protection Authority by postal or e~ctronic medium. Article 10: Exemption from declaration For the most common categories of personal data processing that are not likely to violate privacy or liberties, the protection Authority may draw up and publish standards aimed at simplifying or waiving the notification obligation. Article 11: Exemption from formalities The following shall not be subject to the preconditions indicated in the Articles below: I} ProcesSing mentioned under Article 4 of this Supplementary Act; 2) Processing with the sole objective of keeping an exclusively private mg;".' -6- ~,