§ 8 NDSG
Restriction of the duty to inform pursuant to Article 13(1) to (3) and Article 14(1), (2) and (4) of the General Data Protection Regulation
(1)The controllers may refrain from providing the information pursuant to Article 13(1) to (3) and Article 14(1), (2) and (4) of the General Data Protection Regulation insofar as and as long as
(2)the information would endanger public security or otherwise prejudice the welfare of the Federation or a Land,
(3)this is necessary for the prosecution of criminal offences or administrative offences, or
(4)the information would lead to the disclosure of a matter which is to be kept confidential pursuant to a legal provision in the public interest or on account of the rights and freedoms of another person.