§ 76 BDSG
Logging
(1)Logs shall be kept in automated processing systems for the collection, alteration, consultation, disclosure including transfers, combination and erasure of personal data.
(2)The logs of consultation and disclosure shall make it possible to establish the justification for, the date and time of, such operations and, as far as possible, the identification of the person who consulted or disclosed the personal data, and the identity of the recipients of such personal data.
(3)The logs shall be used solely for the purpose of verification of the lawfulness of data processing, self-monitoring, ensuring the integrity and security of the personal data, and for criminal proceedings. Section 42 Subsection (4) shall apply accordingly.
(4)The controller and the processor shall make the logs available to the Federal Commissioner on request.
(5)The logs shall be deleted at the end of the year following the year in which they were created, unless the controller requires them for the ongoing monitoring of data processing. The controller may restrict the deletion of the logs where the restriction is necessary for the controller's ongoing monitoring of data processing.