"Public authorities may access private information, communication or personal data on grounds of national security only, where this has been prescribed by law, an overriding requirement of the need for such access is established and the concrete measure is necessary in a democratic society in order to protect the existence of the nation or its territorial integrity or political independence against force or threat of force. Public authorities must not delegate this power to private persons or companies contracted to work for the protection of national security otherwise. Measures applied in this context must be open to administrative or judicial review."