§ 17 DSG NRW
Processing of personal data for purposes of scientific or historical research or for statistical purposes
(1)The processing of personal data on the basis of Article 6(1), first sentence, point (e) of Regulation (EU) 2016/679, as well as special categories of personal data on the basis of Article 9(2)(j) of Regulation (EU) 2016/679, shall also be permissible without consent for scientific or historical research purposes or for statistical purposes, where the processing is necessary for these purposes and the legitimate interests of the data subject do not prevail.
(2)The controller shall provide appropriate and specific measures to safeguard the interests of the data subject pursuant to Section 15. In addition to the measures referred to in Section 15, special categories of personal data within the meaning of Article 9(1) of Regulation (EU) 2016/679 processed for scientific or historical research purposes or for statistical purposes shall be anonymised as soon as the research or statistical purpose permits, unless the legitimate interests of the data subject are contrary thereto.
(3)The personal data shall be anonymised as soon as the research or statistical purpose permits. Prior to this, the characteristics by means of which individual details concerning personal or factual circumstances can be attributed to an identified or identifiable person shall be stored separately. They may only be combined with the individual details insofar as the research purpose requires this. They shall be erased as soon as the research or statistical purpose permits.
(4)Personal data processed for scientific or historical research purposes or for statistical purposes, including those within the meaning of Article 9(1) of Regulation (EU) 2016/679, may only be published in accordance with Article 9(2)(a) of Regulation (EU) 2016/679 where
(5)1. the data subject has consented to publication, or
(6)2. this is necessary for the presentation of research results or events of contemporary history and the public interest significantly outweighs the legitimate interests of the data subject.
(7)Claims for access pursuant to Article 15 of Regulation (EU) 2016/679, for rectification pursuant to Article 16 of Regulation (EU) 2016/679, for restriction of processing pursuant to Article 18 of Regulation (EU) 2016/679, and for objection pursuant to Article 21 of Regulation (EU) 2016/679 shall not exist insofar as the exercise of these rights is likely to render impossible or seriously impair the achievement of the research or statistical purposes and the restriction of these rights is necessary for the fulfilment of these purposes.