§ 24 HDSIG
Data Processing for Scientific or Historical Research Purposes
(1)and for Statistical Purposes
(2)By way of derogation from Art. 9 para. 1 of Regulation (EU) No 2016/679, the processing of special categories of personal data within the meaning of Art. 9 para. 1 of Regulation (EU) No 2016/679 shall also be permissible without consent for scientific or historical research purposes or for statistical purposes, where the processing is necessary for these purposes and the interests of the controller in the processing outweigh the interests of the data subject in the exclusion of the processing. The controller shall provide for appropriate and specific measures to safeguard the interests of the data subject pursuant to § 20 para. 2 sentence 2. A data protection concept shall be prepared before the commencement of the research project, which shall be presented to the competent supervisory authority upon request.
(3)The rights of the data subject provided for in Art. 15, 16, 18 and 21 of Regulation (EU) No 2016/679 shall be restricted insofar as these rights are likely to render impossible or seriously impair the achievement of the research or statistical purposes and the restriction is necessary for the fulfilment of the research or statistical purposes. The right of access pursuant to Art. 15 of Regulation (EU) No 2016/679 shall furthermore not exist where the data are necessary for purposes of scientific research and the provision of access would require a disproportionate effort.
(4)In addition to the measures referred to in § 20 para. 2, special categories of personal data within the meaning of Art. 9 para. 1 of Regulation (EU) No 2016/679 processed for scientific or historical research purposes or for statistical purposes shall be anonymised as soon as the research or statistical purpose permits, unless legitimate interests of the data subject preclude this. As soon as the research or statistical purpose permits, the features by means of which a personal reference can be established shall be stored separately; the features shall be erased as soon as the research or statistical purpose permits.
(5)The controller may only publish personal data for scientific or historical research purposes where the data subject has consented or where this is indispensable for the presentation of research results on events of contemporary history. zur Einzelansicht § 24