Employees' Consent To Data Processing Soon To Be Made Electronic Under German Data Protection Law

Author:Dr. Simone Ziegler and Anna Roson Eichelmann
Profession:Herbert Smith Freehills

When it comes to employment-related data processing, employers in Germany are regularly required to obtain consent from their employees by seeking their wet ink signature to be on the safe side.

This additional administrative burden may soon be a thing of the past according to the recently approved draft law for the Second Data Protection Adaptation and Implementation Act (2. Datenschutz- Anpassungs- und Umsetzungsgesetz, hereinafter "2. DSAnpUG").

Under the General Data Protection Regulation (EU) 2016/679 (GDPR), consent generally does not have to be in a written form. However, the currently applicable version of sec. 26 para. 2 of the German Federal Data Protection Act (Bundesdatenschutzgesetz, hereinafter "BDSG"), states that employees consent for employment-related data processing, in most cases, must be in written form. In practice, employers have often sought to obtain a wet ink signature from employees, to be on the safe side.

On 20 September 2019, the German Federal Council approved the draft law for the 2. DSAnpUG. According to the amended version of the BDSG, consent in the context of an employment relationship can also be given electronically. The law has not been promulgated yet, but it is likely that the changes will...

To continue reading