Article 9

1.          Personal data shall not be processed further in a manner that is inconsistent with the purposes for which they were obtained.

2.          In the assessment of whether processing is inconsistent as referred to in the first paragraph, the responsible party shall in any event take account of:

a.       the relationship between the purpose of the planned processing and the purpose for which the data were obtained;

b.       the nature of the relevant data;

c.       the consequences of the planned processing for the person concerned;

d.       the way in which the data were obtained; and

e.       the extent to which provision is made for appropriate assurances in respect of the person concerned.

3.          Further processing of the data for historical, statistical or scientific purposes is not regarded as inconsistent if the responsible party has made the necessary provisions to ensure that the further processing takes place solely for those specific purposes.

4.          Processing of personal data shall not take place to the extent that this is prohibited by a confidentiality obligation on official, professional or statutory grounds.