The Law contains very extensive provisions relating to privacy and data protection. Access to the Register is permitted only in the circumstances stipulated in the Law (Article 12.2) and in accordance with specific rules on access to be adopted by the CEC (Article 11.2). The Law introduces a range of administrative and criminal penalties for unlawful access to and use of data in the Register.