Germany Federal Data Protection Act (BDSG) s49: s 49 Further process for another purpose only within s 45 purposes or where a law allows

What else in your programme already covers this

This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Other controls in Part 3: processing by competent authorities for law enforcement (Directive (EU) 2016/680) – Germany Federal Data Protection Act (BDSG)

• s47 s 47 Apply the six principles to law enforcement processing
• s48 s 48 Process special categories only where strictly necessary and with safeguards
• s50 s 50 Use archival, scientific or statistical forms only in the public interest and with safeguards
• s51 s 51 Where the law allows consent, obtain valid consent and be able to prove it
• s52 s 52 Staff and processors act only on the controller's instructions
• s53 s 53 Bind staff to data confidentiality on taking up duties
• s54 s 54 Automated individual decisions only when authorised by law, never discriminatory
• s55 s 55 Publish general information about the processing