Germany Federal Data Protection Act (BDSG) s36: s 36 Public bodies: honour objections unless a compelling public interest or a legal duty prevails

What else in your programme already covers this

This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Other controls in Part 2: implementing provisions for processing under the GDPR (employment, special categories, rights, private-sector DPOs) – Germany Federal Data Protection Act (BDSG)

• s22 s 22 Process special categories only on a listed national ground and with specific safeguards
• s23 s 23 Public bodies further process data for another purpose only on a listed ground
• s24 s 24 Private bodies reuse data for another purpose only for security, prosecution or legal claims
• s25 s 25 Public bodies transfer data to other bodies only on the listed conditions and with purpose binding
• s26-1 s 26(1) sentence 1 Process employee data only where necessary for the employment relationship, on a GDPR legal basis
• s26-1-s2 s 26(1) sentence 2 Investigate suspected crimes by employees only on documented suspicion and proportionately
• s26-2 s 26(2) Rely on employee consent only where it is genuinely voluntary, in the required form and with text-form notice
• s26-3 s 26(3) Process employees' special category data only for labour and social law duties, or on explicit consent