LfD (Lower Saxony): Difference between revisions

From GDPRhub
No edit summary
No edit summary
 
(8 intermediate revisions by 2 users not shown)
Line 7: Line 7:
|Name:||Landesbeauftragte für den Datenschutz Niedersachsen
|Name:||Landesbeauftragte für den Datenschutz Niedersachsen
|-
|-
|Abbreviation:||LfDI
|Abbreviation:||LfD
|-
|-
|Jurisdiction:||[[Data Protection in Germany|Lower Saxony]]
|Jurisdiction:||[[Data Protection in Germany|Lower Saxony]]
Line 29: Line 29:
|Twitter:||n/a
|Twitter:||n/a
|-
|-
|Procedural Law:||n/a
|Procedural Law:||NVwVfG, VwVfG
|-
|-
|Decision Database:||n/a
|Decision Database:||n/a
|-
|-
|Translated Decisions:||[[:Category:LfDI (Lower Saxony)]]
|Translated Decisions:||[[:Category:LfD (Lower Saxony)]]
|-
|-
|Head Count:||n/a
|Head Count:||about 50
|-
|-
|Budget:||n/a
|Budget:||n/a
|}
|}


The Lower Saxony DPA  (''Landesbeauftragte für den Datenschutz Niedersachsen'') is the state Data Protection Authority for the German state of Lower Saxony. It is in charge of enforcing GDPR in the private sector, within the German state of Lower Saxony.
The Lower Saxony DPA  (''Landesbeauftragte für den Datenschutz Niedersachsen'') is the state Data Protection Authority for the German state of Lower Saxony and in charge of enforcing the GDPR in the state's private sector.


==Structure==
==Structure==
''You can help us by filling in this section!''
The DPA is structured into six specialist departments, as depicted in their organigramm [https://lfd.niedersachsen.de/startseite/wir_uber_uns/die-behorde-56228.html here].


==Applicable Material Law==
==Applicable Material Law==
Lower Saxony has a Data Protection Act (Niedersächsisches Datenschutzgesetz - [http://www.nds-voris.de/jportal/portal/t/ydi/page/bsvorisprod.psml/action/portlets.jw.MainAction?p1=0&eventSubmit_doNavigate=searchInSubtreeTOC&showdoccase=1&doc.hl=0&doc.id=jlr-DSGND2018rahmen&doc.part=R&toc.poskey=#focuspoint NDSG]).
Lower Saxony's Data Protection Act is ''Niedersächsisches Datenschutzgesetz'' - [http://www.nds-voris.de/jportal/portal/t/ydi/page/bsvorisprod.psml/action/portlets.jw.MainAction?p1=0&eventSubmit_doNavigate=searchInSubtreeTOC&showdoccase=1&doc.hl=0&doc.id=jlr-DSGND2018rahmen&doc.part=R&toc.poskey=#focuspoint NDSG].


The NDSG makes (corresponding § 1(1)NDSG) complementary arrangements to the provisions of the GDPR and states furthermore data processing on which the GDPR shall be applicable (§ 2 NDSG) in its first part. It is more specific to the German Federal Data Protection Act (Bundesdatenschutzgesetz - BDSG). So the GDPR is applicable, if there is no more specific rule contained in the NDSG nor the BDSG nor another specific Law.
The NDSG makes (corresponding § 1(1)NDSG) complementary arrangements to the provisions of the GDPR and references data processing on which the GDPR shall be applicable (§ 2 NDSG). It is more specific to the German Federal Data Protection Act (''Bundesdatenschutzgesetz'' - BDSG). So the GDPR is applicable, unless there are no specific rules contained in the NDSG nor the BDSG nor another specific law.


==Procedural Information==
==Procedural Information==
The DPA follows a two-fold approch in their cases. First, they have an administrative procedure where they investigate the case, including assessing possible violations. If a violation is determined, they initiate a follow-up procedure. This second procedure is an entirely new/separate procedure, where the actual decision is made.
The result of this approach is, amongst other things, that the details of the investigation are not disclosed, as they are part of a criminal proceeding.


===Applicable Procedural Law===
===Applicable Procedural Law===
There is a procedural Law in Lower Saxony (Niedersächsisches Verwaltungsverfahrensgesetz - [http://www.nds-voris.de/jportal/?quelle=jlink&query=VwVfG+ND&psml=bsvorisprod.psml&max=true&aiz=true NVwVfG]).
Lower Saxony's procedural law, "Lower Saxony Administrative Procedure Act", is ''Niedersächsisches Verwaltungsverfahrensgesetz'' - [http://www.nds-voris.de/jportal/?quelle=jlink&query=VwVfG+ND&psml=bsvorisprod.psml&max=true&aiz=true NVwVfG].


Corresponding § 1(1) NVwVfG the German Administrative Procedures Law (Verwaltungsverfahrensgesetz - VwVfG) is applicable except for some provisions (§§ 1, 2, 61(2), §§ 78, 94, §§ 100 to 101 VwVfG). The NVwVfG contains further provisions to the VwVfG.
Corresponding § 1(1) NVwVfG the German Administrative Procedures Law (''Verwaltungsverfahrensgesetz'' - VwVfG) is applicable except for some provisions (§§ 1, 2, 61(2), §§ 78, 94, §§ 100 to 101 VwVfG). The NVwVfG contains further provisions to the VwVfG.


Corresponding § 1(2) NVwVfG the VwVfG and the NVwVfG are only applicable if there are no other statutory provisions of Lower Saxony which contain coextensive or conflicting assignments.
Corresponding § 1(2) NVwVfG the VwVfG and the NVwVfG are only applicable if there are no other statutory provisions of Lower Saxony which contain coextensive or conflicting assignments.


===Complaints Procedure under Art 77 GDPR===
===Complaints Procedure under Art 77 GDPR===
''You can help us by filling in this section!''
The DPA has an [https://lfd.niedersachsen.de/startseite/meldeformulare/online_beschwerde/ electronic form] for complaints, but a complaint can also be filed via mail, email or fax. The DPA also provides [https://lfd.niedersachsen.de/download/140049/Hinweise_fuer_die_Beschwerde.pdf instructions] for lodging complaints.


===''Ex Officio'' Procedures under Art 57 GDPR===
===''Ex Officio'' Procedures under Art 57 GDPR===
Line 66: Line 69:


===Appeals===
===Appeals===
''You can help us by filling in this section!''
There is a two-weeks appeals period for decisions. If no appeal is made, the decision becomes legally binding.


==Practical Information==
==Practical Information==
Line 74: Line 77:


===Known Problems===
===Known Problems===
''You can help us by filling in this section!''
Lower Saxony is one of two DPA's in Germany (of 16 in total) that has not implemented the Freedom of Information Act and, consequently, they do not have to adhere to it.
 
Also see the information under "Procedural Information" for details on why we only get access to press releases about decisions.


===Filing an Appeal===
===Filing an Appeal===
Line 88: Line 93:


===Personal===
===Personal===
''You can help us by filling in this section!''
The Lower Saxony DPA has about 50 staff members.


===Caseload===
===Caseload===
''You can help us by filling in this section!''
2021 numbers (from the annual report):
 
* [https://lfd.niedersachsen.de/download/184447 2500 complaints]
* [https://lfd.niedersachsen.de/download/184446 €270,000 in fines]


===Fines===
===Fines===
Line 97: Line 105:


===Annual Reports===
===Annual Reports===
''You can help us by filling in this section!''
The Lower Saxony DPA publishes annual reports. When this page was last updated, the latest report was [https://lfd.niedersachsen.de/startseite/infothek/tatigkeitsberichte/2021/# from 2021].


{{DataProtectionAuthorities}}
{{DataProtectionAuthorities}}

Latest revision as of 08:57, 9 January 2024

Landesbeauftragte für den Datenschutz Niedersachsen
LogoDE-NI.jpg
Name: Landesbeauftragte für den Datenschutz Niedersachsen
Abbreviation: LfD
Jurisdiction: Lower Saxony
Head: Barbara Thiel
Deputy: n/a
Adress: Prinzenstr. 5

30159 Hannover

GERMANY

Webpage: https://www.lfd.niedersachsen.de
Email: poststelle@lfd.niedersachsen.de
Phone: +49 (0)5 11/120-45 00
Twitter: n/a
Procedural Law: NVwVfG, VwVfG
Decision Database: n/a
Translated Decisions: Category:LfD (Lower Saxony)
Head Count: about 50
Budget: n/a

The Lower Saxony DPA (Landesbeauftragte für den Datenschutz Niedersachsen) is the state Data Protection Authority for the German state of Lower Saxony and in charge of enforcing the GDPR in the state's private sector.

Structure

The DPA is structured into six specialist departments, as depicted in their organigramm here.

Applicable Material Law

Lower Saxony's Data Protection Act is Niedersächsisches Datenschutzgesetz - NDSG.

The NDSG makes (corresponding § 1(1)NDSG) complementary arrangements to the provisions of the GDPR and references data processing on which the GDPR shall be applicable (§ 2 NDSG). It is more specific to the German Federal Data Protection Act (Bundesdatenschutzgesetz - BDSG). So the GDPR is applicable, unless there are no specific rules contained in the NDSG nor the BDSG nor another specific law.

Procedural Information

The DPA follows a two-fold approch in their cases. First, they have an administrative procedure where they investigate the case, including assessing possible violations. If a violation is determined, they initiate a follow-up procedure. This second procedure is an entirely new/separate procedure, where the actual decision is made.

The result of this approach is, amongst other things, that the details of the investigation are not disclosed, as they are part of a criminal proceeding.

Applicable Procedural Law

Lower Saxony's procedural law, "Lower Saxony Administrative Procedure Act", is Niedersächsisches Verwaltungsverfahrensgesetz - NVwVfG.

Corresponding § 1(1) NVwVfG the German Administrative Procedures Law (Verwaltungsverfahrensgesetz - VwVfG) is applicable except for some provisions (§§ 1, 2, 61(2), §§ 78, 94, §§ 100 to 101 VwVfG). The NVwVfG contains further provisions to the VwVfG.

Corresponding § 1(2) NVwVfG the VwVfG and the NVwVfG are only applicable if there are no other statutory provisions of Lower Saxony which contain coextensive or conflicting assignments.

Complaints Procedure under Art 77 GDPR

The DPA has an electronic form for complaints, but a complaint can also be filed via mail, email or fax. The DPA also provides instructions for lodging complaints.

Ex Officio Procedures under Art 57 GDPR

You can help us by filling in this section!

Appeals

There is a two-weeks appeals period for decisions. If no appeal is made, the decision becomes legally binding.

Practical Information

Filing with the DPA

You can help us by filling in this section!

Known Problems

Lower Saxony is one of two DPA's in Germany (of 16 in total) that has not implemented the Freedom of Information Act and, consequently, they do not have to adhere to it.

Also see the information under "Procedural Information" for details on why we only get access to press releases about decisions.

Filing an Appeal

You can help us by filling in this section!

Decision Database

You can help us by filling in this section!

Statistics

Funding

You can help us by filling in this section!

Personal

The Lower Saxony DPA has about 50 staff members.

Caseload

2021 numbers (from the annual report):

Fines

You can help us by filling in this section!

Annual Reports

The Lower Saxony DPA publishes annual reports. When this page was last updated, the latest report was from 2021.

EU/EEA/UK Data Protection Authorities
Austria · Belgium · Bulgaria · Croatia · Cyprus · Czech Republic · Denmark · Estonia · Finland (Åland) · France · Germany (Baden-Württemberg · Bavaria, private sector · Bavaria, public sector · Berlin · Brandenburg · Bremen · Hamburg · Hesse · Lower Saxony · Mecklenburg-Vorpommern · North Rhine-Westphalia · Rhineland-Palatinate · Saarland · Saxony · Saxony-Anhalt · Schleswig-Holstein · Thuringia ) · Greece · Hungary · Ireland · Italy · Latvia · Lithuania · Luxembourg · Malta · Netherlands · Poland · Portugal · Romania · Slovakia · Slovenia · Spain (Basque Country · Catalonia · AndalusiaSweden
Iceland · Liechtenstein · Norway · United Kingdom EDPS · EDPB