§ 42 HDSIG
General Principles for the Processing
(1)of Personal Data Personal data must 1. be processed lawfully and in good faith, 2. be collected for specified, explicit and legitimate purposes and not be processed in a manner that is incompatible with those purposes, 3. be adequate, necessary for achieving the processing purpose and not disproportionate in relation to that purpose, 4. be accurate and, where necessary, kept up to date; all reasonable measures must be taken to ensure that personal data that are inaccurate, having regard to the purposes of their processing, are erased or rectified without delay, 5. not be stored in a form which permits identification of the data subjects for longer than is necessary for the purposes for which they are processed, and 6. be processed in a manner that ensures appropriate security of personal data; this shall include protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, to be ensured by appropriate technical and organisational measures. zur Einzelansicht § 42 Zweiter Abschnitt Rechtsgrundlagen für die Verarbeitung personenbezogener Daten