Article 4b (data protection by default settings).

• 1

  The controller shall implement appropriate technical and organizational measures to ensure that standard:

  • a.

    only those police data are processed that are necessary for each specific purpose of the processing; and

  • b.

    police data cannot be made accessible to an unlimited number of natural persons without the intervention of a natural person.

• 2

  The measures referred to in paragraph 1(a) shall in any case concern the amount of police data collected, the extent of processing, the period of storage and the accessibility of the police data.