§ 7 LDSG SH
Automated procedures
(1)Automated procedures shall, before their initial deployment and after material changes, be released by the controller or a person authorised by the controller with regard to the effective implementation of technical and organisational measures to ensure the security of data processing. The testing procedure shall be documented.
(2)The Land Government shall regulate by ordinance the requirements for the security concept as well as the release of automated procedures and further details of proper data processing by public bodies. The Land Commissioner for Data Protection shall be consulted.
(3)An automated procedure which enables several controllers to jointly process personal data (joint procedure) or to transmit personal data by retrieval (retrieval procedure) may be established, provided that this is proportionate, taking into account the legitimate interests of the data subjects and the tasks of the participating bodies.
(4)For procedures pursuant to paragraph 3, the competent supreme Land authority may, by ordinance, establish provisions within the meaning of Article 26(1) of Regulation (EU) 2016/679 and designate a central body to which responsibility for ensuring the proper functioning of the automated procedure is transferred.
(5)Paragraph 3 shall not apply to retrieval from data sets which are open to anyone without or upon special authorisation for use, or the publication of which would be permissible. zur Einzelansicht § 7 Sub-section 2 Rights of the data subject