§ 48 DSG NRW
Notification of data subjects
(1)Where the notification of data subjects about the processing of personal data concerning them is provided for or ordered in special legal provisions, in particular in the case of covert measures, this notification shall contain at least the following information:
(2)1. the information referred to in Section 47,
(3)2. the legal basis of the processing,
(4)3. the storage period applicable to the data or, where that is not possible, the criteria for determining that period,
(5)4. where applicable, the categories of recipients of the personal data, and
(6)5. where necessary, further information, in particular where the personal data were collected without the knowledge of the data subject.
(7)In the cases referred to in paragraph 1, the controller may postpone, restrict or refrain from the notification insofar as and for as long as
(8)1. the performance of the tasks referred to in Section 35,
(9)2. public safety or public order,
(10)3. the rights of third parties,
(11)4. the avoidance of disadvantages for the welfare of the Federation or of a Land, or
(12)5. ensuring that official or judicial investigations, enquiries or proceedings are not obstructed
(13)so require, provided that the interest of the controller in not providing the information outweighs the data subject's interest in being informed.
(14)Where the notification relates to the transmission of personal data to constitutional protection authorities, the Federal Intelligence Service, the Military Counter-Intelligence Service,
(15)or, insofar as the security of the Federation is concerned, other authorities of the Federal Ministry of Defence, it shall be permissible only with the consent of these bodies.
(16)In the case of paragraph 2, paragraph 49(8) shall apply accordingly.