§ 32 NDSG
Ensuring data protection in the case of transmissions or other provision
(1)1The controller shall take appropriate measures to ensure that personal data which are inaccurate, without substantive justification incomplete, or no longer up to date are not transmitted or otherwise provided. 2For this purpose, the controller shall, insofar as this is possible with reasonable effort, verify the quality of the personal data prior to their transmission or provision. 3With each transmission of personal data, the controller shall, insofar as this is possible and appropriate, attach information enabling the recipient to assess the accuracy, completeness and reliability of the data as well as their currency.
(2)1Where the controller has transmitted inaccurate personal data or the transmission was unlawful, the controller shall notify the recipient thereof. 2The recipient shall rectify the transmitted inaccurate data or erase or restrict the processing of the unlawfully transmitted data pursuant to § 28.
(3)1Where the controller has erased personal data pursuant to § 28(1) sentence 1 number 1 or restricted the processing pursuant to § 28(2) sentence 1 number 1 or 2, the controller shall notify other recipients to whom the data have been transmitted of those measures. 2The recipient shall erase the data or restrict their processing.
(4)1Where special conditions apply to the processing of personal data, the transmitting body shall, in the case of data transmissions, inform the recipient of those conditions and of the obligation to observe them. 2The duty to inform may be fulfilled by marking the data accordingly.
(5)The transmitting body shall not apply to recipients in other Member States of the European Union and in Schengen-associated States conditions which do not also apply to corresponding domestic data transmissions.
(6)§ 5(2) and (3) shall apply mutatis mutandis to transmissions within the scope of application of this Part.