Glossary

Federal Data Protection Act (BDSG)

What is the BDSG?

The Federal Data Protection Act (BDSG) is the central data protection law in Germany. It supplements the European General Data Protection Regulation (GDPR) with national regulations, insofar as these are permitted by the GDPR. In particular, the BDSG sets out regulations for the handling of personal data by public bodies and private companies in Germany.

 

What is the difference between BDSG and GDPR?

The GDPR is European law and applies directly in all EU member states. The BDSG is national law and supplements the GDPR where it leaves leeway (“opening clauses”), e.g. with regard to employee data protection or regulations for public authorities.

What does the BDSG actually regulate?

Among other things, the BDSG regulates the rights of data subjects, requirements for the appointment of data protection officers, employee data protection and the responsibilities of the data protection supervisory authorities. Together with the GDPR, the BDSG thus forms the legal framework for data protection in Germany.