§ 37 ThürDSG
Processing of special categories of personal data
(1)(Article 10 of Directive (EU) 2016/680)
(2)The processing of special categories of personal data shall only be permissible where it is strictly necessary for the performance of tasks.
(3)Where special categories of personal data are processed, appropriate safeguards for the rights and interests of the data subjects shall be provided. Appropriate safeguards may include in particular: 1. specific requirements for data security or data protection control, 2. the establishment of specific review periods for erasure, 3. raising awareness among those involved in processing operations, 4. restricting access to personal data within the responsible body, 5. processing separately from other data, 6. pseudonymisation of personal data, 7. encryption of personal data, or 8. specific procedural rules ensuring the lawfulness of processing in the event of transmission or processing for other purposes. zur Einzelansicht § 37