§ 53 BDSG
Data secrecy
(1)Persons involved in data processing shall not process personal data without authorisation (data secrecy). They shall be committed to observing data secrecy upon taking up their activities. Data secrecy shall continue to apply after their activity has ended.