§ 16 ThürDSG
Processing of personal data
(1)(Articles 6 and 9 of Regulation (EU) 2016/679)
(2)The processing of personal data by a public body shall be permissible where it is necessary for the performance of the task of the controller that lies in the public interest and falls within his or her competence, or where it is carried out in the exercise of official authority vested in the controller.
(3)The processing of special categories of personal data within the meaning of Article 9(1) of Regulation (EU) 2016/679 shall, without prejudice to other legal provisions, be permissible insofar as and for as long as 1. this is necessary to avert significant disadvantages to the common good or dangers to public safety, 2. this is necessary for reasons of substantial public interest, in particular where factual indications exist that the proper functioning of the administration is substantially jeopardised, 3. it is necessary for the conduct of scientific or historical research, the scientific interest in conducting the research project significantly outweighs the interest of the data subject in the exclusion of the processing, and the purpose of the research cannot be achieved in any other way or only with disproportionate effort, 4. it is necessary to give effect to the rights and obligations of public bodies in the field of service and employment law, or 5. it is necessary for the purposes of preventive health care, medical diagnosis, health care or treatment, or the management of health services, and the processing of such data is carried out by medical personnel subject to professional secrecy or by other persons subject to a corresponding duty of confidentiality. In the cases of sentence 1, numbers 1 to 4, appropriate and specific measures to safeguard the fundamental rights and interests of the data subjects shall be provided. zur Einzelansicht § 16