Support Centre



Law: Hessian Data Protection and Freedom of Information Act ('HDSIG') of 3 May 2018 (only available in German here)

Regulator: Hessen data protection authority ('HBDI')

Summary: The HDSIG provides for derogations from the General Data Protection Regulation (Regulation (EU) 2016/679) ('GDPR') and data protection requirements within Hesse. In particular, the HDSIG covers exemptions for the public sector, limitations on data subject rights, and special purposes of processing. The HBDI oversees personal data processing activities within Hesse and can be considered a relatively active regulator. In both its 2018 and 2019 annual reports, the HBDI recorded one of the highest totals for number of complaints and number of breach notifications among the German Länder. The HBDI has released an extensive FAQ on data protection topics and has issued fines in the past.