What the BDSG Copilot Can Do
Identify where the BDSG uses GDPR opening clauses for Germany
Work through employee data protection and works council touchpoints
Understand the public-authority rules and federal vs state competence
Navigate the supervisory authority landscape and the DSK
Handle processing situations with special German rules
Connect BDSG duties with NIS 2 Germany obligations
About BDSG Copilot
The Bundesdatenschutzgesetz (BDSG) is Germany's federal data protection act. In its GDPR-era revision it fills the GDPR's opening clauses for Germany: it concretises data protection for employment relationships, sets rules for public authorities, covers processing outside the GDPR's scope, and shapes the landscape of German supervisory authorities. The BDSG Copilot helps you reason about where German law tightens or specifies the GDPR baseline.
Cross-framework mappings
Working across BDSG and another standard? ISMS Mappings is a free public directory of control maps (ISO 27001, SOC 2, NIST, GDPR, and more). A Better ISMS tool, separate from the chat assistant.
Browse free mappingsFrequently Asked Questions
What is the BDSG?
The Bundesdatenschutzgesetz is Germany's federal data protection act. Since its 2018 revision it complements the GDPR by filling the openings the regulation leaves to member states, including employment data protection and rules for public bodies. Media-privilege derogations under GDPR Article 85 mainly live in Land press laws, not the BDSG.
Do German companies need to follow both GDPR and BDSG?
Yes. The GDPR applies directly in Germany and the BDSG adds national specifications on top. For processing in or from Germany you assess the GDPR first, then check whether a BDSG provision tightens or concretises it.
What is the DSK?
The Datenschutzkonferenz is the conference of German federal and state supervisory authorities. Its orientations and guidance shape how the GDPR and BDSG are enforced across Germany in practice.
Ready to do compliance work faster?
Built for speed, accuracy, and audit-ready output.