§ 21 BlnDSG
Joint Procedure and Automated Retrieval Procedure
(1)The establishment of an automated procedure that enables several public bodies to process personal data in or from a joint data holding (joint procedure) or to transmit data to third parties on retrieval (automated retrieval procedure) shall only be permissible insofar as this procedure is appropriate taking into account the rights and freedoms of the data subjects and the tasks of the participating bodies, and risks to the rights and freedoms of the data subjects can be avoided by technical and organisational measures. The Berlin Commissioner for Data Protection and Freedom of Information shall be notified before the establishment. Procedures pursuant to sentence 1 that may entail a high risk to the rights and freedoms of the data subjects shall only be permissible where the establishment is permitted by law or on the basis of a law.
(2)Without prejudice to Article 26 of Regulation (EU) 2016/679, for joint procedures it shall in particular be specified which procedure shall be applied and which body shall be responsible in each case for the determination, modification, further development and observance of technical and substantive requirements for the joint procedure.
(3)Non-public bodies may participate in joint procedures and automated retrieval procedures where a legal provision permits this and they submit to the provisions of this Act to that extent.
(4)For the establishment of joint procedures and automated retrieval procedures for different purposes within a public body, paragraphs 1 and 2 shall apply accordingly.
(5)Paragraphs 1 to 4 shall not apply to data holdings that are open to anyone without or after special authorisation, or the publication of which would be permissible.
(6)Paragraphs 1, 3 and 5 shall apply accordingly to the authorisation of regular automated data transmissions. zur Einzelansicht § 21