First, we need to see if the law or the organic law of a public department concerned has provisions in this regard. If the organic law or other legislations provides that it may share personal data by combination, then it does not need the PDPB's authorization to do so. For example, the organic law of the Commission Against Corruption provides that the Commission have the authority to retrieve data from other public departments by any means, including IT networks.