§ 49 ThürDSG
Processing under instruction, data secrecy
(1)(Article 23 of Directive (EU) 2016/680)
(2)Any person subordinate to a controller or a processor who has access to personal data shall not process such data without authorisation (data secrecy) but only on instruction of the controller, unless required to do so by a legal provision.
(3)The persons involved in data processing shall be obligated to maintain data secrecy upon taking up their activities. The obligation of data secrecy shall continue after the termination of their activities. zur Einzelansicht § 49