Law: Bavarian Data Protection Act ('BayDSG') of 15 May 2018 (only available in German here)

Regulator: Data Protection Authority of Bavaria for the Private Sector ('BayLDA') and Bavarian data protection authority ('BayLfD')

Summary: The BayDSG provides for derogations from the General Data Protection Regulation (Regulation (EU) 2016/679) ('GDPR') and data protection requirements within Bavaria. These include, among other things, detailing obligations for special processing purposes, such as video surveillance, exemptions from certain provisions for public sector activities, and when personal data may be collected from third parties. The BayDSG establishes the Bavarian data protection authorities, which, unlike the other German Länder, are split between public and private sectors, the latter of which is regulated by the BayLDA.