In 2009, the German Federal Data Protection Act (Bundesdatenschutzgesetz – the “Act”) was amended in two stages. The first change altered the landscape regarding scoring and similar instruments used by credit and other agencies. The second change brought about some fundamental changes to the Act regarding the general use of personal data and the requirements for proper use. Some of the most noteworthy changes are the introduction of a breach notification duty, a strengthening of the position of the data protection officer and of the data protection authorities, and amendments to the provisions on the use of personal data for advertising and address dealing purposes.

Download the .PDF below to read the full article.