(6) The data referred to in subsection (2), to the
extent required for the purpose of data processing,
may be transferred to
(a) the persons involved in billing operations,
management of claims and management of
sales, and in client information on behalf of
the information and communications
company;
(b) the bodies authorized under the law to
settle disputes arising in connection with
billing and sales;
(c)
authorized national
security bodies,
investigating authorities and the compe
tent court of justice for the protection of
national security, national defence or
public safety and for the prosecution of
criminal acts and any unauthorized use of
the
information and communications
system; and
(d) court bailiffs.
(7) In respect of data transferred under
subsections (5) and (6), the obligation to maintain
confidentiality shall equally apply to the recipients
of the data as to their provider.
(8) Information and communications service pro
viders shall, for compliance with the disclosure
requirements set out in subsection (6)(c), retain
(a) the data referred to in subsection (2)(a), for
three years from the date when the con
tract is terminated; and
(b) subject to paragraph (a), the data referred
to in subsection (2), for three years.
(9) Information and communications service provi
ders shall, for compliance with the disclosure
requirements set out in subsection (6)(c), be
authorized to process, for a maximum of three
141