§ 3 LDSG BW
Ensuring data protection
(1)In the case of data processing, appropriate and specific measures shall be taken to safeguard the interests of the data subject. In doing so, the state of the art, the costs of implementation, the nature, scope, circumstances and purposes of the processing, as well as the varying likelihood and severity of the risks to the rights and freedoms of natural persons posed by the processing, shall be taken into account. Such measures may include in particular: 1. technical and organisational measures to ensure that the processing complies with Regulation [EU] 2016/679, 2. measures to ensure that it can subsequently be verified and established whether and by whom personal data have been captured, altered or deleted, 3. awareness-raising and training of those involved in processing operations, 4. restricting access to personal data within the public body and by processors, 5. pseudonymisation of personal data, 6. encryption of personal data, 7. the ability to ensure the confidentiality, integrity, availability and resilience of the systems and services related to the processing of personal data on an ongoing basis, including the ability to rapidly restore the availability of and access to personal data in the event of a physical or technical incident, 8. establishing a procedure for regularly testing, assessing and evaluating the effectiveness of technical and organisational measures to ensure the security of processing, and 9. specific procedural rules to ensure compliance with the requirements of this Act and of Regulation [EU] 2016/679 in the event of transmission or processing of personal data for other purposes.
(2)Persons employed by public bodies shall be prohibited from processing personal data without authorisation (data secrecy). Data secrecy shall continue to apply after the termination of their employment. zur Einzelansicht § 3 ABSCHNITT 2 Rechtsgrundlagen der Verarbeitung personenbezogener Daten