Section 9-1. Conditions for control measures in the undertaking
(1) The employer may only implement control measures in relation to employees when such measures are objectively justified by circumstances relating to the undertaking and it does not involve undue strain on the employees.(2) The Personal Data Act shall apply to the employer's handling of information concerning employees in connection with control measures unless otherwise provided by this Act or another Act.