§ 11 NDSG
Documentation obligation when restricting the rights of the data subject
(1)Where the rights of the data subject are restricted on the basis of provisions of this Part, on the basis of provisions of the General Data Protection Regulation or on the basis of other data protection provisions, the controllers shall document the reasons therefor.