§ 24 LDSG SH
Processing of special categories of personal data
(1)The processing of special categories of personal data shall be lawful only where 1. it is strictly necessary for the performance of tasks, 2. it serves to protect the vital interests of the data subject or of another natural person, or 3. it relates to data which the data subject has manifestly made public.
(2)Where special categories of personal data are processed, appropriate safeguards for the rights of the data subjects shall be provided. Appropriate safeguards may include in particular 1. specific requirements for data security or data protection control, 2. the establishment of specific review intervals for erasure, 3. awareness-raising of those involved in processing operations, 4. restricting access to personal data within the responsible body, 5. processing separately from other data, 6. pseudonymisation of personal data, 7. encryption of personal data, or 8. specific procedural rules which, in the event of transmission or processing for other purposes, ensure the lawfulness of the processing.
(3)The processing of genetic and biometric data shall be permissible only where it is provided for by a legal provision. zur Einzelansicht § 24