When transmitting the personal data of the employee, the employer must comply with the following requirements:

a) not to communicate to third parties the personal data of the employee without his written consent, except in cases where this is necessary in order to prevent a danger to the life or health of the employee, as well as the cases provided by law;

b) not to communicate the personal data of the employee for commercial purposes without his written consent;

c) to warn the persons receiving the personal data of the employee about the fact that they can be used only for the purposes for which they were communicated and to ask the persons concerned to confirm in writing the observance of this rule. The persons who receive the personal data of the employee are obliged to respect the confidentiality regime, except for the cases provided by law;

d) to allow access to the personal data of the employee only to the persons empowered in this respect, who, in their turn, have the right to request only the personal data necessary for the exercise of concrete attributions;

e) not to request information regarding the employee's state of health, except for the data regarding the employee's capacity to fulfill his / her work obligations;

f) to transmit to the employees' representatives the personal data of the employee in the manner provided by this code and to limit this information only to those personal data that are necessary for the exercise by the respective representatives of their attributions.