(1) Before providing information to the data subject in accordance with Article 15 of Regulation (EU) 2016/679, the registration authority is required to verify the data subject’s identity.
(2) Where information is provided electronically, it is to be ensured that measures as referred to in Articles 24, 25 and 32 of Regulation (EU) 2016/679 are also implemented with respect to encryption and authentication to ensure data protection and data security, in particular with regard to the confidentiality and integrity of the data which are stored in the population register and sent to the data subject.
(3) The level of assurance required in the case of an electronic application to provide proof of the applicant’s identity is determined by statutory instrument in accordance with section 56 (1) no. 6.