§ 3 HmbDSG
Data secrecy
(1)Persons who, at the public bodies referred to in Section 2(1) or at bodies processing data on their behalf, have official access to personal data shall be prohibited from processing personal data without authorisation for a purpose other than that pertaining to the respective task performance, in particular from disclosing or making such data accessible. This prohibition shall continue to apply after termination of the activity.
(2)The data protection officers pursuant to Articles 37 to 39 of Regulation (EU) 2016/679 of the public bodies referred to in Section 2(1) shall be obliged, including after termination of their activity, to maintain confidentiality regarding the identity of data subjects and employees who have contacted them, as well as regarding circumstances that allow conclusions to be drawn about these persons. zur Einzelansicht § 3 Zweiter Abschnitt Grundsätze der Verarbeitung personenbezogener Daten