§1. Only the bishop is to have the key to the secret archive.
§2. When a see is vacant, the secret archive or safe is not to be opened except in a case of true necessity by the diocesan administrator himself.
§3. Documents are not to be removed from the secret archive or safe.
Source: Code of Canon Law (Vatican.va)