The German data protection authorities have called for a data protection law dealing specifically with employees.
On 4 May 2022, the German Conference of the Federal and State Data Protection Authorities (DSK) published a call for an Employee Data Protection Act. As a reminder, in Germany, data protection is organised by state, so there are 17 state data protection authorities: one for each of the 16 German states and two for Bavaria (one each for public and for private data controllers). Together with the Federal Data Protection Authority of Germany (which is in charge of Federal Public data controllers), they comprise the DSK.
In their call for a specific employee data protection act, the DSK are referring to the announcement by the German governing parties in the Federal coalition agreement (of November 2021) that a distinct employee privacy act would be created by the coalition parties that are planning on being in government until 2025.
This Act would be in addition to the EU GDPR, which of course applies in Germany, and in addition to s26 of the German Data Protection Act (BDSG), which was enacted in May 2018 along with the GDPR. Currently a single provision of the BDSG regulates the basics of national employee privacy protection, as provided for in Article 88 of the GDPR.
It can be assumed that the discussion on whether a specific employee data privacy act is needed, and what it should contain, will continue over the coming weeks and months. It is further to be...
Read Full Story:
https://www.mondaq.com/germany/privacy-protection/1201156/do-employees-need-a...