§ 13 HDSIG
Competence and Tasks
(1)The Hessian Data Protection Commissioner shall monitor the application of this Act, of Regulation (EU) No 2016/679 and of other data protection provisions, including the legal provisions enacted for the transposition of Directive (EU) No 2016/680, by public and non-public bodies and their processors.
(2)In addition to the tasks pursuant to Art. 57 of Regulation (EU) No 2016/679, the Hessian Data Protection Commissioner shall have the tasks of 1. monitoring and enforcing the application of this Act and other data protection provisions, including the legal provisions enacted for the transposition of Directive (EU) No 2016/680, 2. raising public awareness of the risks, rules, safeguards and rights in connection with the processing of personal data and informing the public thereof, with specific measures for children and young people being given special attention, 3. advising the Landtag, the parliamentary groups represented in the Landtag, the Land government, the municipalities and other institutions and bodies on legislative and administrative measures relating to the protection of the rights and freedoms of natural persons with regard to the processing of personal data, 4. raising the awareness of controllers and processors regarding their obligations arising from this Act and other data protection provisions, including the legal provisions enacted for the transposition of Directive (EU) No 2016/680, in connection with the processing of personal data, 5. providing information to any data subject, upon request, on the exercise of their rights under this Act and other data protection provisions, including the legal provisions enacted for the transposition of Directive (EU) No 2016/680, and, where appropriate, cooperating with the supervisory authorities in other Member States for this purpose, 6. dealing with complaints lodged by a data subject or by a body, organisation or association pursuant to Art. 55 of Directive (EU) No 2016/680, investigating the subject matter of the complaint to the extent appropriate, and informing the complainant within a reasonable period of the progress and outcome of the investigation, in particular where further investigation or coordination with another supervisory authority is necessary, 7. cooperating with other supervisory authorities, including through the exchange of information, and providing them with mutual assistance in order to ensure the consistent application and enforcement of this Act and other data protection provisions, including the legal provisions enacted for the transposition of Directive (EU) No 2016/680, 8. conducting investigations on the application of this Act and other data protection provisions, including the legal provisions enacted for the transposition of Directive (EU) No 2016/680, including on the basis of information received from another supervisory authority or another authority, 9. monitoring relevant developments insofar as they have an impact on the protection of personal data, in particular the development of information and communication technologies, and 10. providing advice in relation to the processing operations referred to in § 64. Within the scope of application of Directive (EU) No 2016/680, the Hessian Data Protection Commissioner shall also perform the tasks pursuant to § 52 para. 7 including in conjunction with § 51 para. 4, § 53 para. 7 and § 55.
(3)The Hessian Data Protection Commissioner shall observe the effects of automated data processing on the working methods and decision-making powers of public bodies, in particular whether they lead to a shift in the separation of powers between the constitutional organs of the Land, between the organs of local self-government, or between the state administration and local self-government. He or she shall propose measures that appear suitable to prevent such effects.
(4)The Hessian Data Protection Commissioner shall be 1. the competent authority for the prosecution and punishment of administrative offences under a)