§ 7 NDSG
Automated procedures and joint filing systems
(1)The establishment of an automated retrieval procedure or a joint automated filing system in or from which several data processing public bodies process personal data shall be lawful insofar as this is proportionate, taking into account the rights and freedoms of the data subjects and the tasks of the participating bodies, and risks to the rights and freedoms of the data subjects can be avoided by technical and organisational measures.