The only exception under the bill concerned cases in which the security forces were convicted of causing "malicious damage".
Without adequate access restrictions, there is also a risk that the servers might be subject to malicious damage.