Use only in totally enclosed luminaire, even during testing (IEC61167, IEC 62035, IEC60598)
The luminaire must be able to contain hot lamp parts if the lamp ruptures
Control gear must include end-of-life protection (IEC61167, IEC 62035)
Lamps may use electronic or electromagnetic control gear, except 35W/942 and 20W lamps, which must use electronic control gear.
A lamp breaking is extremely unlikely to have any impact on your health. If a lamp breaks, ventilate the room for 30 minutes and remove the parts, preferably with gloves. Put them in a sealed plastic bag and take it to your local waste facilities for recycling. Do not use a vacuum cleaner.