NDSG — Niedersächsisches Datenschutzgesetz

62 Paragraphs

• § 1Subject matter and scope of application
• § 2Extended application of the General Data Protection Regulation
• § 3Lawfulness of the processing of personal data
• § 4Notice where data are collected from other persons
• § 5Transmission of personal data
• § 6Purpose limitation, change of purpose
• § 7Automated procedures and joint filing systems
• § 8Restriction of the duty to inform pursuant to Article 13(1) to (3) and Article 14(1), (2) and (4) of the General Data Protection Regulation
• § 9Restriction of the right of access pursuant to Article 15 of the General Data Protection Regulation
• § 10Restriction of the notification obligation pursuant to Article 34 of the General Data Protection Regulation
• § 11Documentation obligation when restricting the rights of the data subject
• § 12Processing of personal data in service and employment relationships
• § 13Processing of personal data for scientific or historical research purposes
• § 14Video surveillance
• § 15Public awards and honours
• § 16Clemency proceedings
• § 17Processing of special categories of personal data
• § 18Supervisory authority, legal status of the Land Commissioner for Data Protection
• § 19Tasks of the supervisory authority
• § 20Powers of the supervisory authority, participation
• § 20aCompetences and powers for the Telecommunications Telemedia Data Protection Act
• § 21Response to the activity report
• § 22Supervisory authority for data processing outside the scope of application of the provisions of this Part
• § 23Scope of application
• § 24Definitions
• § 25Principles for the processing of personal data
• § 26Distinction between different categories of data subjects
• § 27Distinction between facts and personal assessments
• § 28Erasure of personal data and restriction of processing
• § 29Automated decision-making
• § 30Data transmission outside the public sector
• § 31Automated retrieval procedure
• § 32Ensuring data protection in the case of transmissions or other provision
• § 33Consent
• § 34Technical and organisational measures for data protection and data security
• § 35Requirements for automated data processing, logging
• § 36Data secrecy
• § 37Processing on instruction
• § 38Records of processing activities
• § 39Data protection impact assessment
• § 40Prior consultation of the supervisory authority
• § 41Notification of a personal data breach to the supervisory authority
• § 42Notification of data subjects affected by a personal data breach
• § 43Confidential reporting of violations
• § 44Joint controllers
• § 45Processing on behalf of the controller
• § 46General conditions
• § 47Data transfer subject to appropriate safeguards
• § 48Exceptions for data transfer in the absence of appropriate safeguards
• § 49Other data transfers to recipients in third countries
• § 50General information
• § 51Right of access
• § 52Rectification, erasure and restriction of processing
• § 53Procedure for the exercise of the rights of the data subject
• § 54Damages
• § 55Lodging a complaint with the supervisory authority
• § 56Legal protection in the event of inactivity of the supervisory authority
• § 57Tasks and powers of the supervisory authority
• § 58Data protection officers of public bodies
• § 59Administrative offences
• § 60Criminal offences
• § 61Transitional provision

Source: https://voris.wolterskluwer-online.de/browse/document/c71011b0-4907-350d-9a9b-43d938e79fda