The Agency shall process, on paper and in one or more information systems, employee data for the fulfilment of its tasks in accordance with this Act, in particular for:
determining personnel requirements;
meeting personnel requirements through staff recruitment;
wage and salary accounting, preparation of personnel records, social insurance notifications;
development and long-term retention of staff;
maintenance and improvement of staff qualifications;
planning, management and control through data analysis, benchmarking, reporting and planning of measures.
It may process the following personnel data necessary for the fulfilment of its tasks as specified in paragraph 1, including sensitive personal data:
personal details;
information on the health situation in relation to fitness for work;
information on performance and potential, and on personal and professional development;
data required for participation in the enforcement of social insurance law;
procedural documents and decisions by authorities relating to work.
It shall be responsible for data protection and security.
It may pass on data to third parties if a legal basis for this exists, or if written consent has been given by the data subject.
It shall issue implementing provisions on:
the architecture, organisation and operation of the information systems;
the processing of data, in particular the collection, storage, archiving and destruction thereof;
data processing permissions;
data categories in accordance with paragraph 2;
data protection and security.
It may provide for the disclosure of non-sensitive data through retrieval procedures. It shall issue implementing provisions for this purpose.
0 commentaries
No commentaries are available for this article yet.