40I.— (1) Article 3(2) authorities and FIU Ireland shall keep records of requests made and received under section 40CA, section 40DA, section 40E(4), section 40F and section 40G.

(2) The records made shall include -

(a) the name and contact details of the organisation and of the staff member requesting the information and, as far as possible, of the recipient of the results of the query or search,

(b) the reference to the national case in relation to which the information is requested,

(c) the subject matter of the requests, and

(d) any executing measures of such requests.

(3) The records shall be –

(a) kept for a period of five years after their creation, and

(b) used solely for the purpose of checking the lawfulness of the processing of personal data.

(4) Article 3(2) authorities and FIU Ireland shall make all records available to the Data Protection Commission upon its request.]