The federal states' data protection authorities and the Federal Commissioner for Data Protection and Freedom of Information are responsible for monitoring compliance with privacy laws in Germany. Except for Bavaria, the federal states' data protection officers are responsible for both, the non-public sector, including
- associations, and
- medical practitioners,
and the public sector, including
- public authorities,
- municipal hospitals, and
- chambers of industry and commerce.
Whereas in the past, supervisory authorities used to check the implementation of data protection laws by companies, associations, and clubs sporadically only, the number of inspections has noticeably increased in recent times.
The supervisory authorities have far-reaching powers enabling them to monitor and enforce compliance with data protection regulations and to penalize any infringements.
Data protection authorities may, for example, require that all information necessary for an examination of the processes relevant in terms of data protection be provided. In addition, they are authorized to perform data protection controls and even to enter a company's premises for this purpose. The supervisory authority may even order an organization to temporarily or definitively restrict the processing of personal data, or impose a ban.
The data protection authorities may impose fines of up to 20,000,000 euros or, in case of a company, up to 4 percent of the company's overall annual turnover generated worldwide in the preceding business year for violations of data protection rules. Beyond the financial loss, the company also risks a damage to their image if data breaches or fines become known to the public. The cooperation with supervisory authorities therefore requires competence and expertise so as to avoid and/or minimize damages to your organization.
Our experienced attorneys will be pleased to represent you in your dealings with data protection authorities to allow you to focus on your core business.
Our advisory services include in particular:
- Preparing inquiries to the data protection authorities;
- Communications with data protection authorities in cases of conflicts, if you are accused of violations of data protection rules;
- Representation in fines proceedings;
- Advice and assistance in case of official control procedures by supervisory authorities;
- Assistance in case of notifications of data breaches.
We represent you before the data protection authorities. Your experts in case of any questions relating to dealings with data protection authorities in Germany or to general data protection issues are Attorney Olga Stepanova and Attorney Patricia Jechel. The easiest way to reach us is by e-mail (firstname.lastname@example.org) or by phone (+49 (0)69 76 75 77 80). Please do not hesitate to contact us with any questions.
"Privacy Law": Recent blog posts
31.03.2021 - Patricia Jechel
22.12.2020 - Olga Stepanova
14.12.2020 - Olga Stepanova