The Federal Commissioner for Data Protection and Freedom of Information

Navigation and service

Basic knowledge

Here we summarized some basic knowledge on data protection.

Guidance from the DSK on the implementation of concrete technical and organisational measures More: The standard data protection model

a shield with a hook in the middle is held by two hands below and above (refer to: The standard data protection model)

Germany has a federal system of data protection supervision, which consists of the data protection supervisory authorities in the federal and state (“Länder”) governments. In addition, in the area of broadcasting, press, churches and religious communities, there also exist separate supervisory bodies. More: Competence of the Federal Commissioner for Data Protection and Freedom of Information (BfDI)

A man taps a virtual shield with lock and next to it are shown various digital symbols (refer to: Competence of the Federal Commissioner for Data Protection and Freedom of Information (BfDI))

When personal data are transferred to a third country or to an international organisation, controllers or processors must check whether the general requirements of the GDPR for a data transfer are met. Furthermore, the additional requirements of Chapter V of the GDPR must be taken into account. More: International data transfers

World map with many networked light points (refer to: International data transfers)

If you believe that the processing of personal data concerning you violates data protection law, you have the right to lodge a complaint with a competent data protection supervisory authority. The competent supervisory authority shall investigate the complaint to an appropriate extent and shall inform you, inter alia, about the progress and the result. More: Complaint about data breaches lodged with supervisory authorities

Top view of a laptop with hands on the keyboard (refer to: Complaint about data breaches lodged with supervisory authorities)

In data protection law, the general principle is that the processing of personal data is prohibited to the extent and as long as it is not permitted by a corresponding statutory provision (so-called prohibition principle). An important fact is the consent of the data subject affected by the data processing. More: Consent

there are shown 8 floating digital documents and a ballpoint pen in one hand  (refer to: Consent)

Data protection does not only apply to domestic persons. Foreigners can also invoke the right to informational self-determination guaranteeing data protection, so that all legal provisions must be measured against this right. More: Registration and data collection with regard to foreigners

es sind viele Hängeregister in Regenbogenfarben in einem Schrank aufgehängt (refer to: Registration and data collection with regard to foreigners)