(1) Data needed for the production of passports, in particular all data from passport applications, shall be sent from the passport authorities to the passport producer electronically. The data may also be transmitted via intermediary agencies. The bodies concerned shall take state-of-the-art measures to ensure data protection and data security, in particular to guarantee the confidentiality and integrity of the data, as well as the identification of the sending agency; when publicly accessible networks are used, state-of-the-art encryption methods shall be applied.
(2) For the electronic enrolment of the photograph and fingerprints, for quality assurance and transmission of passport application data from the passport authority to the passport producer, only those technical systems and components may be used which meet the requirements of the regulation as given in (3). The Federal Office for Information Security shall determine whether the requirements are met.
(3) The Federal Government shall be authorized, via statutory instrument requiring Bundesrat approval, to establish rules concerning procedures and technical specifications for enrolling and ensuring the quality of passport photographs and fingerprints, as well as the sequence of fingerprints to be stored in case of a missing index finger, injured fingertip or poor-quality print, and concerning the form and details of the procedure for transmitting all passport application data from the passport authorities to the passport producer. The statutory instrument shall also govern the details of the procedure for determining whether requirements are met pursuant to (2) second sentence.