§ 6 DSG NRW
Automated retrieval procedures and regular data transmission
(1)The establishment of an automated procedure enabling the transmission of stored personal data to other public bodies shall be permissible insofar as the processing of the data is carried out for purposes pursuant to Article 6(1)(c) or (e) of Regulation (EU) 2016/679 and a legal provision permits it. The permissibility of each individual retrieval shall be determined by the provisions of Regulation (EU) 2016/679 and this Act.
(2)The supreme Land authorities shall be empowered to authorise the establishment of automated retrieval procedures by statutory instrument for the authorities and institutions within their area of responsibility, as well as for other public bodies subject to the legal supervision of the Land. Such a procedure may only be established insofar as this is appropriate taking into account the right to informational self-determination of the affected group of persons and the tasks of the participating bodies. The data recipients, the type of data and the purpose of the retrieval shall be specified. The State Commissioner for Data Protection and Freedom of Information shall be notified at an early stage.
(3)Paragraphs 1 and 2 shall not apply to data holdings that are open for use by anyone without or upon special authorisation, or whose publication would be permissible.
(4)For the establishment of automated retrieval procedures within a public body, paragraph 2, sentences 2 to 4, as well as paragraph 3, shall apply accordingly.
(5)The provisions of paragraphs 1 to 4 shall apply accordingly to the authorisation of regular data transmissions.