(1) Data needed for the production of identity cards, in particular all data from identity card applications, shall be sent from the identity card authorities to the card manufacturer via electronic data transmission. The data may also be transmitted via intermediary agencies. The bodies concerned shall take state-of-the-art measures to ensure data protection and data security, in particular to guarantee the confidentiality and integrity of the data and the identification of the transmitting body; when publicly accessible networks are used, state-of-the-art encryption methods shall be applied.
(2) For the electronic capture and quality assurance of the photograph and fingerprints, and for transmission of identity card application data from the identity card authority to the card manufacturer, only those technical systems and components may be used which meet the requirements of Section 34 no. 3 of the statutory instrument. The Federal Office for Information Security shall ensure compliance with the requirements in accordance with Section 34 no. 4 of the statutory instrument.