What should I know about exception rules and borderline cases?

In the DACH context, GDPR, national employee data protection rules and the General Equal Treatment Act (AGG) must be considered together. Recommendation: for exception rules and borderline cases, establish fixed deletion periods, role-based access rights and audit logs. In practice: example 2 -- review cycle with audit log, KPI tracking and escalation path. Limitation: overly generic rules without role or legal context reduce quality. (Sources: GDPR General Data Protection Regulation, BDSG §26 Beschaeftigtendaten)