§ 51 DSG NRW
Procedures
(1)The controller shall communicate with data subjects using clear and plain language in a concise, intelligible and easily accessible form. Without prejudice to special requirements as to form, the controller should, in principle, respond to applications in the same form in which the application was submitted.
(2)In the case of applications, the controller shall inform the data subject in writing without delay, without prejudice to Section 49(6) and Section 50(6), of the action taken.
(3)The provision of information pursuant to Section 47, the notifications pursuant to Section 50, the provisions on notification of data subjects of personal data breaches, and the processing of applications pursuant to Sections 49 and 50 shall be carried out free of charge. In the case of manifestly unfounded or excessive applications pursuant to Sections 49 and 50, the controller may either charge a reasonable fee based on administrative costs or refuse to act on the application. In this case, the controller must be able to demonstrate the manifestly unfounded or excessive character of the application.
(4)Where the controller has reasonable doubts about the identity of a data subject who has submitted an application pursuant to Sections 49 or 50, he or she may request additional information from the data subject that is necessary to confirm his or her identity.
(5)Obligations of controllers and processors