Church data protection in Germany has enjoyed a special status since canon law was anchored in our current Basic Law. The protection of the member states' law on religious constitution was also established at European level. Thus, taking into account the General Data Protection Regulation (GDPR), the church institutions have exercised their constitutionally guaranteed right to regulate their affairs independently and to enact their own legal provisions. Consequently, the Act on Church Data Protection (KDG) of the Catholic Church was enacted on 20 November 2017 and the Church Act on Data Protection of the Protestant Church in Germany (DSG-EKD) on 15 November 2017.
Although church data protection legislation is based on the GDPR, it also shows various differences from secular data protection law.