Overview
The Federal Data Protection Act (Bundesdatenschutzgesetz - BDSG) is Germany’s primary data protection law that supplements and implements the European Union General Data Protection Regulation (GDPR) within Germany. The Act regulates the processing of personal data by public authorities and private organizations, establishes legal bases for data processing, and defines additional national requirements in areas such as employment-related data processing, video surveillance, and the appointment of data protection officers. It also sets out the roles and responsibilities of data controllers and processors, protects the rights of data subjects, and provides oversight through the Federal Commissioner for Data Protection and Freedom of Information (BfDI). The BDSG supports the lawful, transparent, and secure processing of personal data while safeguarding individuals' privacy rights.