§ 24 BbgDSG
Processing of special categories of personal data
(1)Where special categories of personal data within the meaning of Article 9(1) of Regulation (EU) 2016/679 are processed on the basis of this Act, the controller shall provide for appropriate and specific measures to safeguard the fundamental rights and interests of the data subjects. Taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of the processing, as well as the varying likelihood and severity of the risks to the rights and freedoms of natural persons posed by the processing, such measures may include in particular:
(2)Einzelnorm