Supplements the GDPR. Part 2 covers the legal basis for processing (sections 22 to 31), data subject rights (32 to 37), controller and processor duties including data protection officers of private bodies (38 and 39), supervisory authorities for private bodies (40) and penalties (41 to 43). The English translation includes amendments made by the Act of 23 June 2021 and the German version may be more current.
Spotted something wrong, missing or worth adding? Tell our editors. Every submission
is reviewed and verified against its source before anything changes — nothing you send appears on the
site automatically.
Thank you — our editors will review this
Your suggestion has been received. Contributions from practitioners keep these profiles accurate. Nothing appears on the site until an editor has verified it against its source.
This site uses only the cookies it needs to work, such as keeping you logged in. It uses no advertising or tracking cookies.
Read the Cookie Notice.
