1Persons employed in data processing shall not process personal data without authorization (confidentiality). 2They shall be obligated when taking up their duties to maintain confidentiality. 3The obligation of confidentiality shall continue after their employment ends.