Method for providing a transfer function for security-critical medical image data records with Protected Health Information, PHI, sections from a source application to a destination application, wherein the method can simultaneously serve destination applications that are recognized as secure and destination applications that are recognized as nonsecure and wherein the method accesses a PKI infrastructure that provides a user-specific key (key) for each user, having the following method steps: - following detection of a copy command for at least one image data record in the source application: the image data record and an anonymized image data record (BD a) produced therefrom are forwarded to a trader module (Tr) - the respective key (key) is detected and at least two data convolutes for the image data record, comprising the anonymized image data record (BD a) and an encrypted image data record (BD key), are created - at least the anonymized image data record (BD a) is forwarded to a clipboard and at least the encrypted image data record (BD key) is forwarded to a memory module for storing an association relation for a key (key) and at least one image data record associated with the respective key (key) from the data convolute - following detection of a paste command for at least one image data record in the destination application: the key (key) is detected and it is automatically detected whether the destination application is registered as a secured application or is a nonsecure application - if the destination application is a nonsecure application: the destination application accesses the clipboard in order to access the anonymized image data record (BD a) associated with the detected key (key) and to present it on the destination application - if the destination application is a secure application: the paste command from the destination application is forwarded to the trader (Tr), wherein the trader (Tr) uses the detected key (key) to access the memory module in order to access the encrypted image data record (BD key) associated with the respective key and to decrypt it using the key (key) and to provide the decrypted image data record on the destination application. - following detection of a copy command for at least one image data record in the source application: the image data record and an anonymized image data record (BD a) produced therefrom are forwarded to a trader module (Tr) - the respective key (key) is detected and at least two data convolutes for the image data record, comprising the anonymized image data record (BD a) and an encrypted image data record (BD key), are created - at least the anonymized image data record (BD a) is forwarded to a clipboard and at least the encrypted image data record (BD key) is forwarded to a memory module for storing an association relation for a key (key) and at least one image data record associated with the respective key (key) from the data convolute - following detection of a paste command for at least one image data record in the destination application: the key (key) is detected and it is automatically detected whether the destination application is registered as a secured application or is a nonsecure application - if the destination application is a nonsecure application: the destination application accesses the clipboard in order to access the anonymized image data record (BD a) associated with the detected key (key) and to present it on the destination application - if the destination application is a secure application: the paste command from the destination application is forwarded to the trader (Tr), wherein the trader (Tr) uses the detected key (key) to access the memory module in order to access the encrypted image data record (BD key) associated with the respective key and to decrypt it using the key (key) and to provide the decrypted image data record on the destination application.