§ 71 HDSIG
Logging
(1)In automated processing systems, controllers and processors shall log at least the following processing operations: 1. collection, 2. alteration, 3. consultation, 4. disclosure including transfer, 5. combination, and 6. erasure.
(2)The logs of consultations and disclosures shall make it possible to establish the justification, the date and time of such operations and, as far as possible, the identity of the person who consulted or disclosed the personal data, and the identity of the recipient of the data.
(3)The logs may only be used for the purposes of verifying the lawfulness of the data processing by the data protection officer and the Hessian Data Protection Commissioner, as well as for self-monitoring, ensuring the integrity and security of the personal data, and for criminal proceedings.
(4)The controller and the processor shall make the logs available to the Hessian Data Protection Commissioner upon request. zur Einzelansicht § 71