Processes de-identified data, in Germany

Messstellenbetriebsgesetz (MsbG), § 52 Abs. 3 · Read the law's page

• If you are a body entitled to process smart metering data under the Act, anonymize or pseudonymize personal data as far as the processing purpose allows (MsbG Section 52, paragraph 3, sentence 1).
• Pseudonymize load profiles and meter-reading series on transmission under Section 60, paragraph 3 for final consumers with annual electricity consumption of up to 6,000 kilowatt hours behind whose grid connection no controllable consumption device and no generation plant under the renewable energy or combined heat and power acts is operated (Section 52, paragraph 3, sentence 3, number 1).
• Resolve a pseudonym only within Sections 66 to 69, in favor of the party entitled and only for compelling reasons, where determinations of the Federal Network Agency so provide (Section 52, paragraph 3, sentence 4).

Bundesdatenschutzgesetz (BDSG), § 27 Abs. 3 · Read the law's page

• If you are a controller processing special categories of personal data for scientific or historical research or statistical purposes, anonymize the data as soon as the research or statistical purpose allows, unless legitimate interests of the data subject conflict (BDSG Section 27, paragraph 3, sentence 1).
• Until the data is anonymized, store separately the attributes that allow individual details to be attributed to an identified or identifiable person, and merge them with the individual details only as far as the research or statistical purpose requires (Section 27, paragraph 3, sentences 2 and 3).

Fünftes Buch Sozialgesetzbuch (SGB V), §§ 303e Abs. 3 bis 5, 363 Abs. 2 bis 4 und 399 Abs. 1 Nr. 1 und 2 · Read the law's page

• If you are the Research Data Centre, supply the data an entitled user requests anonymized and aggregated, and supply pseudonymized individual records only without visible pseudonyms, with a temporary working number, for processing under your control (SGB V Section 303e, paragraphs 3 and 4).
• If you use data made accessible by the Research Data Centre, use it only for the purposes for which it was made accessible and do not pass it to third parties unless the Research Data Centre approves (Section 303e, paragraph 5, sentence 1).
• Take care not to establish a reference to persons, care providers or payers when you process the data, and report a reference established by accident to the Research Data Centre without delay (Section 303e, paragraph 5, sentences 2 and 3).
• Do not process the data to establish a personal reference, to identify care providers or payers, or to gain knowledge of third parties' trade secrets (Section 303e, paragraph 5, sentence 4).
• If you are responsible for processing in the electronic patient record, pseudonymize and encrypt the data to be transmitted to the Research Data Centre, send only data that was reliably and automatically pseudonymized, and give it a working number (Section 363, paragraphs 2 and 3).

Fünftes Buch Sozialgesetzbuch (SGB V), § 64e Abs. 11a und 11b · Read the law's page

• If you are the platform operator, provide pseudonymized individual records only for processing under your control, only to persons bound to secrecy or committed to it beforehand, and only with measures that prevent the data from being copied (SGB V Section 64e, paragraph 11a).
• If you use data made accessible under the genome sequencing model project, use it only for the purposes for which it was made accessible and do not pass it to third parties unless the platform operator approves (Section 64e, paragraph 11b, sentence 1).
• Take care not to establish a reference to persons or care providers when you process the data, and report a reference established by accident to the platform operator without delay (Section 64e, paragraph 11b, sentences 4 and 5).
• Do not intentionally process the data to establish a personal reference, to identify care providers or to gain knowledge of third parties' trade secrets, except for the case identification by the trust centre that paragraph 9c names (Section 64e, paragraph 11b, sentences 6 and 7).

Gesetz über die Statistik für Bundeszwecke (Bundesstatistikgesetz, BStatG), §§ 16 Abs. 6 und 8, 21 und 22 · Read the law's page

• If you receive factually anonymized individual data from a statistical office for a scientific project, use it only for the purposes for which it was passed on and delete it once the project is carried out (BStatG Section 16, paragraph 8).
• Do not combine individual data from federal statistics, alone or with other information, to establish a reference to a person, enterprise, establishment or workplace outside the tasks of the Act or of the legal provision ordering the statistic (Section 21).

Straßenverkehrsgesetz (StVG), § 63a Abs. 5 · Read the law's page

• If you transmit the position and time data a vehicle with an automated driving function stores to third parties for accident research in connection with an event under Section 7, paragraph 1, transmit it in anonymized form (StVG Section 63a, paragraph 5).