(39) The processing of data to the extent strictly necessary for the purposes of ensuring network and information security, i.e. the ability of a network or an information system to resist, at a given level of confidence, accidental events or unlawful or malicious actions that compromise the availability, authenticity, integrity and confidentiality of stored or transmitted data, and the security of the related services offered by, or accessible via, these networks and systems, by public authorities, Computer Emergency Response Teams – ...[+++] CERTs, Computer Security Incident Response Teams ­­– CSIRTs, providers of electronic communications networks and services and by providers of security technologies and services, constitutes a legitimate interest of the concerned data controller.

The processing of traffic data to the extent strictly necessary for the purposes of ensuring network and information security, i.e. the ability of a network or an information system to resist, at a given level of confidence, accidental events or unlawful or malicious actions that compromise the availability, authenticity, integrity and confidentiality of stored or transmitted data, and the security of the related services offered by, or accessible via, these networks and systems, by providers of security technologies and services when ...[+++] acting as data controllers is subject to Article 7(f) of Directive 95/46/EC.

When such devices are connected to publicly available electronic communications networks or make use of electronic communications services as a basic infrastructure, the relevant provisions of Directive 2002/58/EC (Directive on privacy and electronic communications), including those on security, traffic and location data and on confidentiality, should apply.

Directive 2002/58/EC (Directive on privacy and electronic communications) provides for the harmonisation of the provisions of the Member States required to ensure an equivalent level of protection of fundamental rights and freedoms, in particular the right to privacy and the right to confidentiality, with respect to the processing of personal data in the electronic communications sector, and to ensure the free movement of such data and of electronic communications equipment and services in the Community.

38. Calls for examination of ways of actively supporting and promoting the work aimed at making use of the European Health Insurance Card with a standardised set of electronic patient data common practice, in order to simplify the procedures for European citizens obtaining health care in other Member States and to ensure confidentiality of sensitive medical data; considers that the holders of the card have to decide themselves the data which will appear on it; to make the most effective use of this system, calls for the adoption of European health indicators; considers that it is crucial, for patient safety reasons, to encourage natio ...[+++]nal authorities to exchange information on registration and disciplinary matters relating to health-care providers operating across borders; believes that it is appropriate to expand the European health insurance card scheme to include a system of international exchange of data concerning the insurance status of the patient;

The obligations incumbent on service providers concerning measures to ensure data quality, which derive from Article 6 of Directive 95/46/EC, and their obligations concerning measures to ensure confidentiality and security of processing of data, which derive from Articles 16 and 17 of that Directive, apply in full to data being retained within the meaning of this Directive.