Art. 36 BayDSG
Confidential Reporting of Data Protection Violations
(1)The controller shall make it possible for confidential reports of violations of data protection provisions occurring within its area of responsibility to be submitted to it. Art. 12 para. 2 shall apply accordingly to the body entrusted with receiving such reports.