§ 45 DSG NRW
Processing of special categories of personal data
(1)The processing of special categories of personal data shall be permissible only where it is strictly necessary for the performance of tasks.
(2)Where special categories of personal data are processed, appropriate safeguards for the rights of the data subjects shall be provided. Appropriate safeguards may in particular include those set out in Section 15.