Document background
A Data Processing Notice is a fundamental document required by both the EU General Data Protection Regulation (GDPR) and German data protection law, particularly the Federal Data Protection Act (BDSG). This document must be provided to individuals whose personal data is being processed, typically at the point of data collection. It serves as a transparent explanation of how an organization handles personal data, including the purposes and legal bases for processing, data sharing practices, retention periods, and individuals' rights. The notice must be written in clear, plain language and be easily accessible to data subjects. Under German law, there are specific requirements for certain types of data processing, such as employee data or video surveillance, which must be reflected in the notice when applicable. Organizations must regularly review and update their Data Processing Notice to ensure it accurately reflects their current data processing activities and complies with evolving legal requirements and guidance from German Data Protection Authorities.
