§ 8 DSG M-V
Processing of special categories of personal data
(1)Where special categories of personal data within the meaning of Article 9(1) of Regulation (EU) 2016/679 are processed on the basis of this Part, the controller shall take appropriate and specific measures to safeguard the fundamental rights and interests of the data subject. Taking into account the state of the art, the costs of implementation and the nature, circumstances and purposes of the processing, as well as the varying likelihood and severity of the risks to the rights and freedoms of natural persons posed by the processing, such measures may include in particular: 1. technical and organisational measures to ensure that the processing complies with Regulation (EU) 2016/679, 2. measures to ensure that it can subsequently be verified and established whether and by whom personal data have been processed, 3. awareness-raising among those involved in processing operations, 4. restricting access to personal data within the controller's body and by any processors, 5. pseudonymisation or encryption of personal data, 6. ensuring the confidentiality, integrity and availability of the data and the resilience of the systems and services related to the processing of personal data, including the ability to restore the availability of and access to such data, systems and services in the event of an incident, 7. establishing a procedure for regularly testing, assessing and evaluating the effectiveness of technical and organisational measures to ensure the security of processing, or 8. specific procedural rules to ensure compliance with the requirements of this Act and of Regulation (EU) 2016/679 in the event of transmission or processing for other purposes. zur Einzelansicht § 8 Kapitel 1 Besondere Verarbeitungssituationen im Anwendungsbereich der Verordnung (EU) 2016/679