1. Special Categories of Data: Additional provisions for genetic data, biometric data, or other special categories - include when handling these specific types of data

2. International Data Transfers: Provisions for transferring data outside Germany/EU - include when international data sharing is anticipated

3. Research Use: Specific provisions for using confidential information in medical research - include for research institutions

4. Electronic Health Records: Specific provisions for electronic health record systems - include when dealing with digital health platforms

5. Third Party Access: Provisions governing access by other healthcare providers or contractors - include when third party access is necessary

6. Insurance and Liability: Additional provisions regarding professional liability and insurance - include for high-risk settings

7. Training Requirements: Specific training requirements for handling confidential information - include for larger organizations

1. Schedule 1 - Security Measures: Detailed technical and organizational security measures required for protecting confidential information

2. Schedule 2 - Approved Purposes: Detailed list of approved purposes for which confidential information may be used

3. Schedule 3 - Authorized Personnel: List of personnel authorized to access confidential information and their access levels

4. Schedule 4 - Data Processing Requirements: Detailed GDPR-compliant data processing requirements and procedures

5. Appendix A - Breach Response Plan: Detailed procedures for responding to confidentiality breaches

6. Appendix B - Documentation Requirements: Templates and requirements for documenting confidential information access and use