¹ Persons employed in data processing shall not process personal data without authorization (confidentiality). ² They shall be obligated when taking up their duties to maintain confidentiality. ³ The obligation of confidentiality shall continue after their employment ends.