Institution or law · GDPR recital 10
National data protection acts
In plain English
Each Member State's own data protection law, such as Germany's Federal Data Protection Act (BDSG). It applies alongside the GDPR and fills in the points the GDPR leaves to national law.
What the law says
Regarding the processing of personal data for compliance with a legal obligation, for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller, Member States should be allowed to maintain or introduce national provisions to further specify the application of the rules of this Regulation.
For private bodies, this Act shall apply to the processing of personal data wholly or partly by automated means and to the processing other than by automated means of personal data which form part of a filing system or are intended to form part of a filing system …
Related
The official text is quoted word for word from the English version of the source named under it; only the version published in the Official Journal of the EU is legally binding. The plain-English line is Fino’s own summary, not legal advice.