LfD (Lower Saxony): Difference between revisions
m (Missing word.) |
No edit summary |
||
| (9 intermediate revisions by 2 users not shown) | |||
| Line 7: | Line 7: | ||
|Name:||Landesbeauftragte für den Datenschutz Niedersachsen | |Name:||Landesbeauftragte für den Datenschutz Niedersachsen | ||
|- | |- | ||
|Abbreviation:|| | |Abbreviation:||LfD | ||
|- | |- | ||
|Jurisdiction:||[[Data Protection in Germany|Lower Saxony]] | |Jurisdiction:||[[Data Protection in Germany|Lower Saxony]] | ||
| Line 29: | Line 29: | ||
|Twitter:||n/a | |Twitter:||n/a | ||
|- | |- | ||
|Procedural Law:|| | |Procedural Law:||NVwVfG, VwVfG | ||
|- | |- | ||
|Decision Database:||n/a | |Decision Database:||n/a | ||
|- | |- | ||
|Translated Decisions:||[[:Category: | |Translated Decisions:||[[:Category:LfD (Lower Saxony)]] | ||
|- | |- | ||
|Head Count:|| | |Head Count:||about 50 | ||
|- | |- | ||
|Budget:||n/a | |Budget:||n/a | ||
|} | |} | ||
The Lower Saxony DPA (''Landesbeauftragte für den Datenschutz Niedersachsen'') is the state Data Protection Authority for the German state of Lower Saxony | The Lower Saxony DPA (''Landesbeauftragte für den Datenschutz Niedersachsen'') is the state Data Protection Authority for the German state of Lower Saxony and in charge of enforcing the GDPR in the state's private sector. | ||
==Structure== | ==Structure== | ||
'' | The DPA is structured into six specialist departments, as depicted in their organigramm [https://lfd.niedersachsen.de/startseite/wir_uber_uns/die-behorde-56228.html here]. | ||
==Applicable Material Law== | |||
Lower Saxony's Data Protection Act is ''Niedersächsisches Datenschutzgesetz'' - [http://www.nds-voris.de/jportal/portal/t/ydi/page/bsvorisprod.psml/action/portlets.jw.MainAction?p1=0&eventSubmit_doNavigate=searchInSubtreeTOC&showdoccase=1&doc.hl=0&doc.id=jlr-DSGND2018rahmen&doc.part=R&toc.poskey=#focuspoint NDSG]. | |||
The NDSG makes (corresponding § 1(1)NDSG) complementary arrangements to the provisions of the GDPR and references data processing on which the GDPR shall be applicable (§ 2 NDSG). It is more specific to the German Federal Data Protection Act (''Bundesdatenschutzgesetz'' - BDSG). So the GDPR is applicable, unless there are no specific rules contained in the NDSG nor the BDSG nor another specific law. | |||
==Procedural Information== | ==Procedural Information== | ||
The DPA follows a two-fold approch in their cases. First, they have an administrative procedure where they investigate the case, including assessing possible violations. If a violation is determined, they initiate a follow-up procedure. This second procedure is an entirely new/separate procedure, where the actual decision is made. | |||
The result of this approach is, amongst other things, that the details of the investigation are not disclosed, as they are part of a criminal proceeding. | |||
===Applicable Procedural Law=== | ===Applicable Procedural Law=== | ||
'' | Lower Saxony's procedural law, "Lower Saxony Administrative Procedure Act", is ''Niedersächsisches Verwaltungsverfahrensgesetz'' - [http://www.nds-voris.de/jportal/?quelle=jlink&query=VwVfG+ND&psml=bsvorisprod.psml&max=true&aiz=true NVwVfG]. | ||
Corresponding § 1(1) NVwVfG the German Administrative Procedures Law (''Verwaltungsverfahrensgesetz'' - VwVfG) is applicable except for some provisions (§§ 1, 2, 61(2), §§ 78, 94, §§ 100 to 101 VwVfG). The NVwVfG contains further provisions to the VwVfG. | |||
Corresponding § 1(2) NVwVfG the VwVfG and the NVwVfG are only applicable if there are no other statutory provisions of Lower Saxony which contain coextensive or conflicting assignments. | |||
===Complaints Procedure under Art 77 GDPR=== | ===Complaints Procedure under Art 77 GDPR=== | ||
The DPA has an [https://lfd.niedersachsen.de/startseite/meldeformulare/online_beschwerde/ electronic form] for complaints, but a complaint can also be filed via mail, email or fax. The DPA also provides [https://lfd.niedersachsen.de/download/140049/Hinweise_fuer_die_Beschwerde.pdf instructions] for lodging complaints. | |||
===''Ex Officio'' Procedures under Art 57 GDPR=== | ===''Ex Officio'' Procedures under Art 57 GDPR=== | ||
| Line 57: | Line 69: | ||
===Appeals=== | ===Appeals=== | ||
There is a two-weeks appeals period for decisions. If no appeal is made, the decision becomes legally binding. | |||
==Practical Information== | ==Practical Information== | ||
| Line 65: | Line 77: | ||
===Known Problems=== | ===Known Problems=== | ||
' | Lower Saxony is one of two DPA's in Germany (of 16 in total) that has not implemented the Freedom of Information Act and, consequently, they do not have to adhere to it. | ||
Also see the information under "Procedural Information" for details on why we only get access to press releases about decisions. | |||
===Filing an Appeal=== | ===Filing an Appeal=== | ||
| Line 79: | Line 93: | ||
===Personal=== | ===Personal=== | ||
The Lower Saxony DPA has about 50 staff members. | |||
===Caseload=== | ===Caseload=== | ||
2021 numbers (from the annual report): | |||
* [https://lfd.niedersachsen.de/download/184447 2500 complaints] | |||
* [https://lfd.niedersachsen.de/download/184446 €270,000 in fines] | |||
===Fines=== | ===Fines=== | ||
| Line 88: | Line 105: | ||
===Annual Reports=== | ===Annual Reports=== | ||
The Lower Saxony DPA publishes annual reports. When this page was last updated, the latest report was [https://lfd.niedersachsen.de/startseite/infothek/tatigkeitsberichte/2021/# from 2021]. | |||
{{DataProtectionAuthorities}} | {{DataProtectionAuthorities}} | ||
Latest revision as of 08:57, 9 January 2024
| Landesbeauftragte für den Datenschutz Niedersachsen | |
|---|---|
 | |
| Name: | Landesbeauftragte für den Datenschutz Niedersachsen |
| Abbreviation: | LfD |
| Jurisdiction: | Lower Saxony |
| Head: | Barbara Thiel |
| Deputy: | n/a |
| Adress: | Prinzenstr. 5
30159 Hannover GERMANY |
| Webpage: | https://www.lfd.niedersachsen.de |
| Email: | poststelle@lfd.niedersachsen.de |
| Phone: | +49 (0)5 11/120-45 00 |
| Twitter: | n/a |
| Procedural Law: | NVwVfG, VwVfG |
| Decision Database: | n/a |
| Translated Decisions: | Category:LfD (Lower Saxony) |
| Head Count: | about 50 |
| Budget: | n/a |
The Lower Saxony DPA (Landesbeauftragte für den Datenschutz Niedersachsen) is the state Data Protection Authority for the German state of Lower Saxony and in charge of enforcing the GDPR in the state's private sector.
Structure
The DPA is structured into six specialist departments, as depicted in their organigramm here.
Applicable Material Law
Lower Saxony's Data Protection Act is Niedersächsisches Datenschutzgesetz - NDSG.
The NDSG makes (corresponding § 1(1)NDSG) complementary arrangements to the provisions of the GDPR and references data processing on which the GDPR shall be applicable (§ 2 NDSG). It is more specific to the German Federal Data Protection Act (Bundesdatenschutzgesetz - BDSG). So the GDPR is applicable, unless there are no specific rules contained in the NDSG nor the BDSG nor another specific law.
Procedural Information
The DPA follows a two-fold approch in their cases. First, they have an administrative procedure where they investigate the case, including assessing possible violations. If a violation is determined, they initiate a follow-up procedure. This second procedure is an entirely new/separate procedure, where the actual decision is made.
The result of this approach is, amongst other things, that the details of the investigation are not disclosed, as they are part of a criminal proceeding.
Applicable Procedural Law
Lower Saxony's procedural law, "Lower Saxony Administrative Procedure Act", is Niedersächsisches Verwaltungsverfahrensgesetz - NVwVfG.
Corresponding § 1(1) NVwVfG the German Administrative Procedures Law (Verwaltungsverfahrensgesetz - VwVfG) is applicable except for some provisions (§§ 1, 2, 61(2), §§ 78, 94, §§ 100 to 101 VwVfG). The NVwVfG contains further provisions to the VwVfG.
Corresponding § 1(2) NVwVfG the VwVfG and the NVwVfG are only applicable if there are no other statutory provisions of Lower Saxony which contain coextensive or conflicting assignments.
Complaints Procedure under Art 77 GDPR
The DPA has an electronic form for complaints, but a complaint can also be filed via mail, email or fax. The DPA also provides instructions for lodging complaints.
Ex Officio Procedures under Art 57 GDPR
You can help us by filling in this section!
Appeals
There is a two-weeks appeals period for decisions. If no appeal is made, the decision becomes legally binding.
Practical Information
Filing with the DPA
You can help us by filling in this section!
Known Problems
Lower Saxony is one of two DPA's in Germany (of 16 in total) that has not implemented the Freedom of Information Act and, consequently, they do not have to adhere to it.
Also see the information under "Procedural Information" for details on why we only get access to press releases about decisions.
Filing an Appeal
You can help us by filling in this section!
Decision Database
You can help us by filling in this section!
Statistics
Funding
You can help us by filling in this section!
Personal
The Lower Saxony DPA has about 50 staff members.
Caseload
2021 numbers (from the annual report):
Fines
You can help us by filling in this section!
Annual Reports
The Lower Saxony DPA publishes annual reports. When this page was last updated, the latest report was from 2021.
| EU/EEA/UK Data Protection Authorities | |
|---|---|
| Austria · Belgium · Bulgaria · Croatia · Cyprus · Czech Republic · Denmark · Estonia · Finland (Åland) · France · Germany (Baden-Württemberg · Bavaria, private sector · Bavaria, public sector · Berlin · Brandenburg · Bremen · Hamburg · Hesse · Lower Saxony · Mecklenburg-Vorpommern · North Rhine-Westphalia · Rhineland-Palatinate · Saarland · Saxony · Saxony-Anhalt · Schleswig-Holstein · Thuringia ) · Greece · Hungary · Ireland · Italy · Latvia · Lithuania · Luxembourg · Malta · Netherlands · Poland · Portugal · Romania · Slovakia · Slovenia · Spain (Basque Country · Catalonia · Andalusia)· Sweden | |
| Iceland · Liechtenstein · Norway · United Kingdom | EDPS · EDPB |
