🇩🇪Germany

DE-BDSG

Federal Data Protection Act (BDSG)

Federal Commissioner for Data Protection and Freedom of Information; competent Land authorities

Germany overview

Germany has a national GDPR overlay

The GDPR applies directly, but it leaves Member States choices in areas such as children, employment, sensitive data, research, freedom of expression, public-sector processing and supervisory procedure. Germany uses its national law to exercise those choices.

National law

DE-BDSG: Federal Data Protection Act (BDSG)

What to assess

Start with the GDPR baseline, then assess the national provisions concerning employee data, private-sector DPO thresholds, research, video surveillance, credit and scoring. Apply sector legislation and regulator measures where the national law refers to them.

Compliance method

Use the country-specific law page and controls as a delta layer. Retain the current official text, an applicability decision and evidence for every national rule implemented.