Right of access of the data subject

(1) The right of access under Article 15(1) and (2) of Regulation (EU) 2016/679 does not exist where and insofar as 1. giving the information would endanger the proper performance of the tasks within the BSI's competence, 2. giving the information a) would endanger public security or the safeguarding of network and information security, or b) would otherwise cause disadvantages to the welfare of the Federation or of a Land, or 3. giving the information would endanger criminal investigations or the prosecution of criminal offences, and the data subject's interest in being given the information must therefore give way.
(2) Section 34(2) to (4) of the Federal Data Protection Act applies accordingly.