§ 60 DSG NRW
The State Commissioner for Data Protection and Freedom of Information
(1)Supervision over compliance with and monitoring of the provisions of this Part and other provisions on data protection in the processing of personal data for purposes of Section 35 shall be the responsibility of the State Commissioner for Data Protection and Freedom of Information. Articles 51 to 55 of Regulation (EU) 2016/679 and the provisions of this Act enacted for their implementation shall apply accordingly.
(2)The State Commissioner for Data Protection and Freedom of Information shall perform the tasks pursuant to Article 57(1)(a) to (i), (l) and (t), and (2) to (4) of Regulation (EU) 2016/679 accordingly. Where he or she exercises the rights of the data subject on his or her behalf, he or she shall review the lawfulness of the processing. The data subject shall be informed within a reasonable period of the result of this review or of the reasons why the review was not carried out.
(3)In addition, the State Commissioner for Data Protection and Freedom of Information shall have the powers pursuant to Article 58(1)(e), (2)(a), (d) and (f), (3)(a) and (b), (4) and (5) of Regulation (EU) 2016/679 accordingly.
(4)Article 59 of Regulation (EU) 2016/679 shall apply accordingly, with the proviso that the annual report on the activities of the supervisory authority may also contain a list of the types of sanctions imposed.