§ 20 NDSG
Powers of the supervisory authority, participation
(1)The authority headed by the Land Commissioner for Data Protection shall exercise its powers pursuant to Article 58(1) to (3) of the General Data Protection Regulation also with regard to the provisions of this Part and other data protection provisions.
(2)1Where there are indications that data processing violates the General Data Protection Regulation, the provisions of this Part or other data protection provisions, the authority headed by the Land Commissioner for Data Protection may request the controller or the processor to submit comments within a specified period. 2The authority headed by the Land Commissioner for Data Protection shall simultaneously inform the legal or technical supervisory authority of the request. 3The comments pursuant to sentence 1 should also set out how the consequences of a violation are to be remedied and future violations avoided. 4The controllers and processors shall forward a copy of their comments to the legal or technical supervisory authority.
(3)1Authorities and other public bodies of the Land may also take legal action against binding decisions of the authority headed by the Land Commissioner for Data Protection that concern them. 2The action shall have suspensory effect.
(4)1The authorities and other public bodies shall be obliged to support the authority headed by the Land Commissioner for Data Protection in the performance of its tasks. 2In particular, they shall grant the authority headed by the Land Commissioner for Data Protection access at all times to the official premises, including all data processing equipment and devices, as well as to all personal data and information that the authority headed by the Land Commissioner for Data Protection considers necessary for the performance of its tasks. 3At the request of the authority headed by the Land Commissioner for Data Protection, all documents relating to the processing of personal data shall be submitted within a specified period.
(5)The power to impose administrative fines shall be vested in the authority headed by the Land Commissioner for Data Protection vis-a-vis public bodies only insofar as they participate as undertakings in competition.