The German Parliament has voted in May the new data protection law (upon the basis of the EU General Regulation on Data Protection Rules, “GDPR” in force as of May 2018), the “DSAnpUG-EU”.

The GDPR provides on several occasions, where the national law (i.e. the German) is authorized / entitled to rule according its standing rules, own regulatory discretion. This is controversial on the political as well as on the (European) legal point of view in how far those discretions may be extended, even partially.

The German draft has been under criticism until the end of the law discussions in some of its (new) provisions.

The new German law provides e.g. restrictions particularly for the concerned party, in what is known as “scoring” procedures, Art .22 GDPR, arts. 28, 28 a&b DSAnpUG-EU.