§ 11 DSG NRW
Restriction of the obligation to provide information upon collection of personal data pursuant to Articles 13 and 14 of Regulation (EU) 2016/679
(1)In the processing of personal data, the information obligation of the controller pursuant to Article 13(3) and Article 14(1), (2) and (4) of Regulation (EU) 2016/679 shall not apply insofar as and for as long as
(2)1. the information would jeopardise the prosecution of criminal offences, administrative offences or breaches of professional rules, public safety, or the protection of the welfare of the Federation or of a Land,
(3)2. the personal data or the fact of their processing must be kept confidential pursuant to a legal provision or on account of the rights and freedoms of other persons, or
(4)3. the information would impair the assertion, exercise or defence of civil-law claims and the interests of the controller in not providing the information outweigh the interests of the data subject.
(5)Where the information obligation relates to the transmission of personal data to public prosecution authorities, police authorities, financial administration authorities insofar as they store personal data for the purposes of prevention, investigation, detection or prosecution of criminal offences, constitutional protection authorities, the Federal Intelligence Service, the Military Counter-Intelligence Service and, insofar as the security of the Federation is concerned, other authorities of the Federal Ministry of Defence, the provision of information shall be permissible only with the consent of these bodies. The same shall apply to the transmission of personal data from these authorities.