What does this cover?

The German Data Protection Authority (the GDPA) welcomed in the new year by establishing itself as an independent federal authority, distinct from the German government.

This structural arrangement means that the GDPA complies with the EU requirement for Member States to retain an autonomous central body for overseeing the compliance of organisations with EU data protection legislation and for upholding the rights of EU citizens in respect of their personal data. The GDPA is directly accountable to the German Parliament and any decisions made by it may be subject to judicial review.

To view the German DPA press release, please click here (German).