§ 13 LDSG RP
Restriction of Notification
(1)under Article 34 of the General Data Protection Regulation The controller may refrain from notifying the data subject affected by a personal data breach insofar as and for as long as the notification 1. would endanger public security or otherwise be detrimental to the interests of the Federation or of a Land, 2. the notification would jeopardize the prosecution of criminal offences or administrative offences, 3. would lead to the disclosure of matters that must be kept secret pursuant to a legal provision or because of the rights and freedoms of other persons, or 4. would jeopardize the functionality of data processing systems of a public body.