Law: State Data Protection Act (LDSG) of 8 May 2018 (only available in German here)

Regulator: Rhineland-Palatinate data protection authority (LfDI Rheinland-Pfalz)

Summary: Rhineland-Palatinate implemented the GDPR through the State Data Protection Act of May 8, 2018 (LDSG) (only available in German here) which became effective on May 25, 2018.

The LDSG provides for derogations from the GDPR and data protection requirements within Rhineland-Palatinate. These include exemptions for public sector activities, special purposes of processing, limitations on data subject rights, and the establishment of the Rhineland-Palatinate data protection authority (LfDI Rheinland-Pfalz). The LfDI Rheinland-Pfalz is a relatively active authority and has issued monetary penalties in the past. One of the guidance from the LfDI Rheinland-Pfalz has emphasised data protection related to employment and the roles of data protection officers within companies.