§ 43 HDSIG
Processing of Special Categories
(1)of Personal Data
(2)The processing of special categories of personal data shall only be permissible where it is absolutely necessary for the performance of tasks.
(3)Where special categories of personal data are processed, appropriate safeguards for the rights and freedoms of the data subjects shall be provided for. Appropriate safeguards may in particular be 1. specific requirements for data security or data protection monitoring, 2. the establishment of specific review periods for erasure, 3. the raising of awareness of those involved in processing operations, 4. the restriction of access to personal data within the responsible body, 5. processing separate from other data, 6. the pseudonymisation of personal data, 7. the encryption of personal data, or 8. specific procedural rules which, in the case of a transfer or processing for other purposes, ensure the lawfulness of the processing. zur Einzelansicht § 43