The 17 German state data protection authorities disagree on many questions – for example, whether certain software complies with data protection requirements. The coalition government has therefore undertaken to streamline and consolidate supervision tasks. In future, the German Federal Data Protection Commissioner will assume central tasks for the private sector.

How this is to work in practice was the subject of a first workshop discussion on September 15, involving the affected economic associations, including the DIHK.

Lack of uniformity is outdated

The DIHK’s Chief Legal Officer, Stephan Wernicke, shows sympathy for a centralised solution: "The lack of uniformity in data protection supervision in Germany is outdated and not required by federalism," Wernicke said in response to media inquiries. This was clearly shown by the DIHK 2024 data protection survey.

"Our most important goal is legal certainty – and that still doesn’t exist," said the DIHK Chief Legal Officer. "The opinions among the 17 state data protection authorities were too disparate. The states had several years to organise themselves, but it didn’t work. That’s why the planned centralisation is the right step."

Uniformity more important than regional contacts

He stressed that some companies valued regional contacts: "But uniformity is ultimately more important than accessibility." There are still many uncertainties in data protection, Wernicke explained, "and the fines are even increasing." It has been several years since the GDPR came into force – "a reform of supervision must not be long overdue."

The attached PDF provides additional insights into this matter. (only available in German)