A condition for legal processing is the legal basis given in Article 10, paragraph (1) of the ZZLP and the existence of one of the exceptions given in Article 13, paragraph (2) of the ZZLP.

In the case of approval, the processing of health data can only be carried out after previously obtained approval from the AZLP in accordance with Article 84 of the ZZLP .

Approval is not required in the event that the processing of personal data is determined by a law that contains security and other measures to protect the rights and freedoms of the subjects of personal data.

In such cases, the Agency makes a decision within 90 days after receiving the request for approval.