Germany's planned implementation of the EU General Data Protection Regulation is riddled with holes and illegalities, according to one of the country's leading privacy associations. The government's interior ministry produced a new draft of the law in late November, inviting various stakeholders to provide input. According to Thilo Weichert, the former head of the data protection authority in the state of Schleswig-Holstein and a current board member of the German Data Protection Association (DVD), the government withdrew an earlier draft after pushback from the privacy community. However, the DVD said in a submission to the government last week, the new draft is also heavily flawed. What's more, because Germany will hold federal elections sometime in the third quarter, and the implementation of the GDPR will need to be in place ahead of the EU law coming into effect in May 2018, the law will need to be finalized by mid-2017. So the current draft will almost certainly be the basis for the new law. The DVD contends the draft provides overly broad exemptions for data subjects' right to access as well as restrict the powers of the DPAs in their ability to probe and sanction breaches in the legal and medical fields. David Meyer has the details in this exclusive for The Privacy Advisor. 
Full Story