§ 52 LDSG SH
Logging
(1)In automated processing systems, controllers and processors shall log at least the following processing operations: 1. collection, 2. alteration, 3. consultation, 4. disclosure including transmission, 5. combination, and 6. erasure.
(2)The logs of consultations and disclosures must make it possible to establish the justification, the date and time of such operations, and, as far as possible, the identity of the person who consulted or disclosed the personal data, and the identity of the recipients of the data.
(3)The logs may be used exclusively for the purpose of verifying the lawfulness of the data processing by the data protection officer and the data subject, for self-monitoring and for ensuring the integrity and security of the personal data. The logs may be used for criminal and administrative offence proceedings where this is provided for by a legal provision.
(4)Unless otherwise provided for by law, the log data shall be erased at the end of the year following the year in which they were generated.
(5)The controller and the processor shall make the logs available to the Land Commissioner upon request.
(6)For automated processing systems established before 6 May 2016, paragraphs 1 and 2 may be derogated from until 6 May 2023, insofar as compliance would involve a disproportionate effort. zur Einzelansicht § 52