BDSG Experts in Germany
matched fast from over 15,000 CVs with the power of AIHire experts who interpret the Bundesdatenschutzgesetz, align internal processes with GDPR requirements and prepare records, policies and data protection impact assessments. FRATCH matches you precisely with vetted, available freelancers in minutes.
Meet FRATCH Experts in Germany, who have recently used BDSG
Federico L.
Last position:
Senior IAM Manager & Single Point of Contact for Information Security at EnBW Energie Baden-Württemberg AG
As Germany’s only large integrated energy company, EnBW covers the entire value chain—from energy generation and distribution to serving customers. The company is expanding its renewable energy sources, working toward a socially responsible coal phase-out, and advancing key technologies such as the use of green hydrogen. A rapid energy transition and achieving climate neutrality by 2035 are priorities for EnBW. Developing and implementing an end-to-end process view that takes both technical and organizational aspects into account Ensuring end-to-end control of all IAM-related technical services Establishing clear responsibilities and accountabilities across the IAM landscape Working with various departments to identify and optimize an end-to-end architecture and act as the Single Point of Contact (SPoC) for Information Security Introducing and monitoring governance policies to ensure compliance and security Continuously improving IAM processes and systems through regular audits and service reviews Taking part in external process audits as part of official audits against ISO standards Further developing the policy that sets administrative requirements and procedures, and aligning it with administrative departments Conceptually developing the KPI system for measuring process quality
Peter D.
Last position:
Security Consultant at Public-law institution of the city administration
- Requirements management, process planning, interface function, ISMS setup, and documentation
- Setup and establishment of an ISMS according to ISO 27001 and establishment of emergency management / ITSCM
- Coordination of the circumstances with the public-sector IT service provider
- Consideration of KRITIS relevance within the scope and implementation of a B3S
- Development of requirements for document control and the continuous improvement process
- Preparation of relevant project documents
- Analysis of existing processes and preparation of guidelines
- Requirements gathering for ISMS and ITSCM and coordination with the IT service provider, including definition of interfaces
- Analysis of communication processes and escalation paths
- Review of documents for risk management, ISMS, emergency preparedness, and emergency response
- Redesign of the complete documentation and preparation of new relevant documents
- Development of necessary rules, policies, and concepts
- Interface between customer and service provider to ensure document quality
- Coordination of protection needs with specialist departments, particularly regarding KRITIS relevance, and planning of resulting measures
- Development of preventive measures to minimize the risk of data center outages in scenarios such as pandemics or ransomware attacks
- Definition of the test strategy for IT emergency exercises
- Initiation of necessary awareness training measures for specialist departments
- External Information Security Officer
- Introduction of document control
Henry H.
Last position:
Interim Manager IT-Compliance at Int. Fertigungsunternehmen
- Industry: mechanical engineering, vehicle manufacturing
- Regulations: Data Act
- Project focus: data governance, legally compliant use of machine data, data platforms
- Assigned by: CFO, platform product owner
Successes/Results (early phase):
- Compliance support for the setup of an internal standardized data usage platform based on Databricks.
- Created the basis for the legally compliant and effective use of machine data, including:
- Technical: gap analysis and closing of gaps in the segmentation and maintenance of collected machine data.
- Technical: consideration of data flows from the platform to users and third parties.
- Organizational: drafting and finalizing the required data usage agreements.
Regina K.
Last position:
Data Protection Consultant at Promotional institute of a federal state (public credit institution)
Industry: Finance/Insurance
- Sparring partner for the data protection team
- Taking over tasks from the data protection backlog
- Updating data protection processes
- Updating TOMs
- Revising template documents (including DPA, data protection guidelines)
- Conducting audits (authorization concept, software development)
- Taking over tasks from day-to-day operations
- Processing data protection reports
- Conducting DPIA and TIA
- Reviewing data processing agreements
- Designing and delivering trainings
- Standard Data Protection Model
- AI and data protection
Result: Successfully supported the data protection team, worked through the data protection backlog, and delivered trainings successfully
Alicja W.
Last position:
Integrated security and emergency documentation for a 24/7 logistics company at Mid-sized logistics company
- Creation of complete bilingual (DE/EN) security and emergency documentation: Business Continuity Plan / Disaster Recovery Plan, Incident Response Plan v2.0 with four case-specific playbooks (PICERL), access control policy, Vulnerability Management Policy, Business Resilience Programme, Risk Governance Plan
- Consolidation into an integrated emergency manual (12 chapters) with immediate checklists for six emergency scenarios, a prioritized action table and a formal approval structure
- Review and documentation of the applicability of NIS2 and HinSchG, including the legal reasoning for non-applicability
- Processing of a penetration test report (Greenbone) with complete remediation of all findings and formal risk acceptance of a residual risk with a documented compensating control
Peter K.
Last position:
IT Audit Expert at Sparkasse
Support for Internal Audit:
Conducting an audit of the data protection officer and data protection management:
- Preparing an audit program based on the audit field concept
- Requesting the necessary audit documentation
- Carrying out control testing based on the audit program with the following focus:
- Reviewing the relevant PPS processes
- Reviewing the data protection mission statement, data protection policy, and data protection management concept
- Conducting audit interviews with the data protection officer
- Preparing the audit documentation
- Training a junior auditor in the methodology of Internal Audit
- Coordinating the audit documentation with the head of audit
Pierre G.
Last position:
Ansible Automation, Windows Third Level Support at DB InfraGO AG
- PRISMA project
- Ansible automation
- Windows third-level support for Windows NT, Windows 2000, Windows 2013, Windows 2016, Windows 2019
Stephan M.
Last position:
Product Owner at Self-employed
- Industry: Health Care/ IT
- Tools: Internet, telephone, email, Confluence, Azure DevOps, DISweb, Microsoft Teams, Microsoft Office, FHIR
- Requirements engineering for implementing the e-prescription in an existing PVS and a web-based dialysis monitoring system
- Implementation of the archive and exchange interface of the KBV
- Creation and maintenance of user stories and backlog maintenance
- Stakeholder management and support for developers in implementing the user stories
- Reporting to management and conducting refinements
Christian E.
Last position:
IT Consulting / IT Rebuild at IT Rebuild (PF)
- Analysis of requirements and the current situation
- Migration of an old domain structure and Tobit to Exchange 2019 with connection to MS365
- Review of implementation options and planning for the protection of sensitive data
- Planning with regard to BSI Grundschutz, BDSG, and DSGVO
- IT governance and IT security backtests
- Support with ERP setup and securing mail transfer
- Hyper-V 2016/2022, Microsoft Terminal Services Cluster, Microsoft Exchange 2019
- Office 365, Microsoft 365, Azure AD, Teams, Salesforce
- Cisco, Zyxel, and HP switches, Sophos firewalls/UTMs, SecurePoint
- Microsoft IIS 2022, IPv4/IPv6, Veeam, Wortmann Online Backup, NextCloud
- Services: DNS, DHCP, TCP/IP, subnetting, firewalling, routing, VoIP, group policies (GPO), SIEM, remote work, home office, high availability, failover, VLAN, PRTG
Thomas M.
Last position:
Consultant / System Administrator / IT Analyst at Thomas Martini IT-Services
- Analysis and audit of the current situation on-site and at customer locations
- Planning of IT infrastructures and advice on new hardware purchases as well as migration planning
- Planning and management of the IT budget
- Configuration and support of IT hardware under Windows 7, 8.x, 10 and Mac OS
- Review and update of documentation with regard to GDPR
- Analysis and expansion of technical and organizational measures in accordance with GDPR and BDSG
- Training of employees
- Training in AI-Assistant Consulting and Cybersecurity with AI
- Recording the current state and planning the target state
- 2nd/3rd level support (C/S/N)
- Technical environment: Exchange Administration, Active Directory, MS Server 2016 R2, MS Server 2022, MS SQL Developer, MS SQL, Visual Studio 2013+, Tivoli Monitoring, Tivoli Remote, TeamViewer, weclapp CRM Solution, RA-Micro, IT Compliance, Citrix, UltraEdit, SCCM, Windows XP–11, Office 2010–M365, VPN Solutions, Lexware Solutions, OKI Management Solutions, LogMyTime, SAGE Systems
Gentrit A.
Last position:
External Information Security Officer at Large dairy company
- Align information security objectives with executive management
- Monitor and steer the Information Security Management System (ISMS) in collaboration with the information security team
- Serve as the primary point of contact for all information security matters and advise internal staff and process owners (e.g., Supplier Management, HR)
- Further develop and improve the ISMS and information security policies
- Deliver training and drive ongoing employee awareness
- Hold monthly coordination meetings (jour fixe)
- Conduct risk analyses together with executive management and process owners
- Support audits (e.g., ISO 27001) as well as customer-specific audits
- Structure assessment and handling of information security incidents in cooperation with the information security team
- Support preparation of the annual plan and budget for information security measures
- Plan and conduct internal audits and management reviews
- Integrate the ISMS with other management systems
Michael F.
Last position:
Project Manager Implementation B3S / ISO 27001 at Health Insurance Fund
- Coordination of the B3S and ISO 27001 implementation project, considering the upcoming KRITIS evidence procedure
- Providing consulting services in ISO 27001, B3S, KRITIS, and IT baseline protection
- Collaborating with the Information Security Officer (ISO)
- Identifying company assets for IT risk management
- Developing a zone concept for IT risk management
- Creating an action plan for B3S
- Developing a template for risk analyses
George O.
Last position:
IT Senior Consultant at Data Group
- IT Senior Consultant (bank infrastructure, Active Directory, Azure, security, PKI)
- Planning, design, and implementation of cloud solutions based on Microsoft Azure / M365
- Teams, M365, and cloud services
- Vulnerabilities, threats, attacks
- Security analysis, security policy, security architecture
- Conducting meetings and presentations at various management levels
- Organizing and leading team meetings to improve internal communication
- Tools: PowerShell, Active Directory, GPO, DNS, DHCP, scripting
Matthias M.
Last position:
Project Manager at HSBC
- Project Manager for banking projects
- Management and coordination of the projects 'XONTRO T7 Migration' and 'UNO – Unified for New Opportunities'. Management of international stakeholders, preparation and leadership of steering committees, and coordination between departments, exchanges, and external partners.
- Project management of the strategic projects 'XONTRO T7 Migration' and 'UNO – Unified for New Opportunities'
- Management of international stakeholders including exchanges, custodians, and external project partners
- Coordination of functional and technical test activities at the exchanges between trading, IT, accounting, and mid-/back office
- Facilitation of steering committees at management level
- Preparation of decision papers, status reports, and risk analyses
- Conduct analyses in the areas of reporting (compliance, regulatory reporting, etc.), taxes on securities transactions & custody accounts, process analysis
- Enforcement of required requirements/specifications
- Coordination between business, IT, operations, and external market participants
- Coordination and alignment with external market participants, service providers, exchanges, and other project stakeholders
Robert V.
Last position:
Freelance Consultant Information Security and Business Continuity at Freelance business consulting
- Provide consulting services nationwide in both private and public sectors
- Advise on information security management systems, IT-Grundschutz, KRITIS compliance, TISAX, business continuity and crisis management
- Support the introduction of policies, risk management methods, asset registers and supplier management
- Conduct internal audits, training workshops and support audit preparations
Discover over 15,000 top freelancers
Statistics of experts using BDSG
Aggregated from the professional profiles of matched freelancers.
Experience
25 years
Position duration
3.6 years
Positions per freelancer
14
Top business areas
Information Technology, Project Management, Legal
Top industries
Information Technology, Professional Services, Banking and Finance
Certification focus areas
Information Technology, Legal, Audit
Bachelor's degree or higher
88%
Master's degree or higher
65%
Doctorate
15%
Certifications per freelancer
7
Most common languages
German, English, French
Speak two or more languages
100%
Based on our profile pool as of 29 Oct 2026.
Daily rate distribution
The chart shows how the daily rates of experts in this technology in Germany are distributed, based on recent contracts on our platform. Each bar covers a rate range — its height shows the share of experts charging within that range.
Average rates of experts in Germany using BDSG
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Calculated based on our freelancers’ daily rates as of 29 Oct 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
BDSG experts industry focus
See which industries our matched freelancers work in most often — every figure is calculated live from the freelancers on FRATCH.
- Information Technology (80%)
- Professional Services (69%)
- Banking and Finance (46%)
- Manufacturing (43%)
- Healthcare (40%)
- Education (37%)
- Insurance (37%)
- Government and Administration (37%)
Please note that freelancers can work across multiple industries, so percentages overlap.
About the technology
Legal framework
The Bundesdatenschutzgesetz, commonly known as BDSG or the German Federal Data Protection Act, supplements the GDPR in Germany. It sets national rules for handling personal data, including employment data, video surveillance, scoring and the role of the Federal Commissioner for Data Protection and Freedom of Information. Its requirements apply alongside sector-specific obligations.
Practical application
BDSG expertise helps companies turn legal duties into workable processes. Specialists review how personal data is collected, used, stored, shared and deleted across employees, customers, applicants, suppliers and service providers.
- Map processing activities and legal bases
- Draft privacy notices and internal policies
- Review retention, deletion and access rules
- Assess monitoring, recruitment and workplace data use
Related expertise
Strong BDSG work connects legal interpretation with operational controls. Relevant knowledge includes GDPR, records of processing, data subject rights, data processing agreements, international transfers, information security and privacy by design. Familiarity with ISO 27001, cloud services and HR systems can make the work more effective.
When specialists help
Companies often bring in freelance expertise during a new system rollout, an audit, a restructuring or an investigation into a possible compliance gap. German businesses with distributed teams may also need support coordinating remote work, local processes and communication in German with internal stakeholders or supervisory authorities.
- Prepare for an internal or external privacy review
- Assess a new cloud, CRM or HR solution
- Establish a practical data breach response process
- Support a temporary privacy workload or transition
Project deliverables
Typical deliverables include processing records, data protection impact assessments, privacy notices, deletion concepts, handling procedures for access requests and assessments of processors. A specialist may also create training material, control plans, audit evidence and an action register that assigns clear owners and deadlines.
Quality signals
A capable BDSG professional distinguishes binding requirements from sensible safeguards and explains the reasoning in plain language. Look for experience with comparable processing activities, careful documentation, balanced risk assessments and the ability to work with legal, security, HR and product teams. Good work remains usable after the engagement ends.
Frequently asked questions
Key details about BDSG, drawn from the questions we get asked most.
The BDSG supplements the GDPR with German rules for specific areas of personal data protection. Companies use it to assess processing activities, define safeguards and handle topics such as employee data, video surveillance and supervisory responsibilities.
The Bundesdatenschutzgesetz does not replace the GDPR; it works alongside it. A qualified specialist identifies which GDPR principles apply directly and where German provisions add detail, restrictions or specific procedures.
A strong BDSG specialist usually understands records of processing, data processing agreements, data subject rights and international transfers. Experience with information security, cloud procurement, HR processes and privacy by design is also valuable.
The right level depends on the scope and risk of the processing, not on a fixed time period. For a focused policy review, a specialist with matching subject knowledge may be enough; a company-wide programme needs proven work across governance, operations and stakeholder management.
Yes, much of the German Federal Data Protection Act work can be handled remotely through secure document sharing, workshops and interviews. On-site sessions can still help when specialists must inspect physical processes, meet works councils or align several German business units.
Bring in a BDSG freelancer when a new system, restructuring, audit, incident or temporary workload creates a clear privacy requirement. External expertise is especially useful when internal teams need an independent assessment and documented actions.
Review whether the specialist connects each conclusion to a clear legal basis, risk assessment and practical control. High-quality BDSG work is specific to the processing activity, documents assumptions and gives teams actions they can own and maintain.
Knowledge of the BDSG is essential, but it is rarely sufficient on its own. The professional should also understand the GDPR, the company’s technology and workflows, relevant sector rules, and how to communicate clearly with German-speaking stakeholders when required.
The average hourly rate of freelancers in Germany who have used BDSG in their recent projects is 116 €, which corresponds to a daily rate of about 927 € based on an 8-hour working day.
Of the freelancers in Germany who have used BDSG in their recent projects, 88% hold at least a Bachelor's degree, 65% hold at least a Master's degree, and 15% hold a doctorate.
On average, freelancers in Germany who have used BDSG in their recent projects have 25 years of professional experience, with a single engagement typically lasting around 3.6 years.
The most common languages among freelancers in Germany who have used BDSG in their recent projects are German (100%), English (94%), and French (23%).
The most common industries among freelancers in Germany who have used BDSG in their recent projects are Information Technology (80%), Professional Services (69%), and Banking and Finance (46%).
The most common business areas among freelancers in Germany who have used BDSG in their recent projects are Information Technology (89%), Project Management (83%), and Legal (71%).
Main locations of FRATCH Experts, who have recently used BDSG
Our freelancers and interim experts are at home across the DACH region — available on-site in the major business hubs or fully remote. Choose a location to discover matched specialists, local market insights and up-to-date availability.
Berlin Hamburg Munich Cologne Frankfurt Stuttgart Dusseldorf Leipzig Dortmund Essen Bremen Dresden Hanover Nuremberg Request a free demo
Get in touch with the FRATCH team and we will get back to you within 4 hours.
Would you rather directly get in touch?
We always have the time for a call or email!
Philipp Thomaschewski
FRATCH CEO
