Service provided by the Federal Ministry of Justice
and the Federal Office of Justice ‒ www.gesetze-im-internet.de
Übersetzung durch den Sprachendienst des Bundesministeriums des Innern
Translations provided by the Language Service of the Federal Ministry of the Interior
Stand: Die vorliegende Übersetzung berücksichtigt die Änderung(en) des Gesetzes durch
Artikel 12 des Gesetzes vom 20. November 2019 (BGBl. I S. 1626).
Version information: The English translation includes the amendments to the Act by Article
12 of the Act of 20 November 2019 (Federal Law Gazette I, p. 1626).
Zur Nutzung dieser Übersetzung lesen Sie bitte den Hinweis auf www.gesetze-im-internet.de
unter "Translations".
For conditions governing use of this translation, please see the information provided at
www.gesetze-im-internet.de under "Translations".
Federal Data Protection Act
(BDSG)
Federal Data Protection Act of 30 June 2017 (Federal Law Gazette I p. 2097), as last
amended by Article 12 of the Act of 20 November 2019 (Federal Law Gazette I, p. 1626).
Part I
Common provisions
Chapter 1
Scope and definitions
Section 1
Scope of the Act
(1) This Act shall apply to the processing of personal data by
1.
public bodies of the Federation,
2.
public bodies of the Länder, where data protection is not governed by Land law
and where they
a)
carry out federal law or
b) act in the capacity of judicial bodies in matters other than administrative
matters.
For private bodies, this Act shall apply to the process ing of personal data wholly or partly by
automated means and to the processing other than by automated means of personal data
which form part of a filing system or are intended to form part of a filing system unless such
processing is conducted by natural persons in the course of a purely personal or domestic
activity.
(2) Other federal data protection legislation shall take precedence over the provisions of this
Act. If such legislation does not govern a matter conclusively or at all which is covered by
this Act, then this Act shall apply. The duty to observe the legal obligation of main-taining
secrecy or professional or special official confidentiality not based on legal provisions shall
remain unaffected.
(3) The provisions of this Act shall take precedence over those of the Administrative
Procedure Act where personal data are processed to establish the facts.
(4) This Act shall apply to public bodies. It shall apply to private bodies if
1.
the controller or processor processes personal data in Germany,
Page 1 of 43