Germany. ePrivacy / marketing. Act
TDDDG (ex-TTDSG)Telecommunications Digital Services Data Protection Act (Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz – TDDDG), formerly TTDSG
In force
Partly verified
Medium confidence. No verification notes recorded.§1Summary
- Synopsis
The TDDDG transposes the ePrivacy Directive's confidentiality and terminal-equipment rules in Germany. §25 requires consent for storing or accessing information on end-user devices unless strictly necessary for a requested service.
- Key themes
- Unique features
§26 enables recognised consent management services (PIMS) under the EinwV; electronic marketing rules are separately in UWG §7.
- SaaS relevance
Any SaaS website, app or product that sets non-essential cookies/SDKs or sends marketing emails/SMS to users in this country needs prior consent (subject to exemptions) under this law, regardless of where the provider is based.
§2Obligations
- Extraterritorial
- Yes
- Breach notification
- Telecom providers: authority notification under Reg 611/2013; otherwise GDPR
- DPO
- No
- Cross-border transfers
- None
- Maximum penalty
- Up to €300,000 (§28)
§3Dates
- Key dates
- Adopted
- In force
- Renamed from TTDSG to TDDDG on 2024-05-14 by the Digitale-Dienste-Gesetz; cookie rule §25; consent management ordinance under §26
§4Text and authority
- Text
- Authoritative text gesetze-im-internet.de
- Authority
- BfDI (telecom services); Länder DPAs (digital services/websites)
§5Where it applies
- Domestic law of
- Germany
§6Sources and verification
- Sources consulted
- Verification
Medium confidence.
Partly verified
Medium confidence. No verification notes recorded.