Law: State Data Protection Act ('LDSG') of 8 May 2018 (only available in German here)

Regulator: Rhineland-Palatinate data protection authority ('LfDI Rheinland-Pfalz')

Summary: The DSG NRW provides for derogations from the General Data Protection Regulation (Regulation (EU) 2016/679) ('GDPR') and data protection requirements within Rhineland-Palatinate. These include exemptions for public sector activities, special purposes of processing, limitations on data subject rights, and the establishment of the LfDI Rheinland-Pfalz. The LfDI Rheinland-Pfalz is a relatively active authority and has issued monetary penalties in the past. Guidance from the LfDI Rheinland-Pfalz has emphasised data protection related to employment and the roles of data protection officers within companies.