New German Federal Commissioner for Data Protection and Freedom of Information (BfDI) Hennemann: eco Association anticipates clear impetus for modern data law

• Internet industry welcomes Moritz Hennemann's appointment

• Data protection reform and the Data Code must now swiftly provide greater clarity and legal certainty

Berlin, 1 October 2026 - Following the appointment of Prof. Dr Moritz Hennemann as German Federal Commissioner for Data Protection and Freedom of Information (BfDI), eco - Association of the Internet Industry welcomes the new appointment at the helm of the authority. The new German Federal Commissioner for Data Protection and Freedom of Information (BfDI) faces key decisions: the German federal government intends to modernise data protection law, reform data protection supervision and consolidate responsibilities more effectively. At the same time, a Data Code is intended to bring greater clarity to data law.

"We have expressly welcomed the appointment of Moritz Hennemann. He possesses the professional expertise required to consider data protection, data law and digital innovation as an integrated whole and to build on the outstanding work of his predecessor, Louisa Specht-Riemenschneider", says Alexander Rabe, Managing Director of eco - Association of the Internet Industry. "The new Federal Data Protection Commissioner faces major challenges. It will be crucial to see whether it is possible to create clarity, reliability and practicality from a fragmented legal and supervisory system."

Making data protection supervision more reliable and consistent

From the eco Association's perspective, a key task lies in the announced reform of data protection supervision. The coalition agreement provides for responsibilities and powers to be consolidated more strongly within the Federal Data Protection Commissioner's office and for the Data Protection Conference to be enshrined in the German Federal Data Protection Act (BDSG). The aim is to achieve greater coherence and a more uniform interpretation of the GDPR and the German Federal Data Protection Act (BDSG). Exactly how the supervisory structures will be reorganised remains to be seen. The German federal government is examining various models; the reform is to be implemented by the end of 2027 at the latest.

eco Association hopes that Hennemann will play an active role in shaping this reform process. For companies in the Internet industry - and for the Internet industry as a whole - the application of data protection law must not depend on which supervisory authority is responsible in each individual case. Digital business models always extend beyond the boundaries of the federal states.

"European data protection law therefore also requires a uniform supervisory practice. Companies need clear responsibilities and reliable decisions rather than differing interpretations of the same rules", says Rabe. "The pooling of competences and better cooperation between supervisory authorities therefore represent a major opportunity. It is crucial that the reform actually ensures greater legal certainty."

Data Code must simplify data law

eco Association also sees an important role for the new German Federal Commissioner for Data Protection and Freedom of Information (BfDI) in relation to the planned Data Code. The German federal government intends to consolidate appropriate regulatory frameworks into a Data Code. From the eco Association's perspective, the aim must be to eliminate existing overlaps and facilitate the use of data, rather than creating additional national requirements.

A clear distinction is needed here: the Data Code should focus on data management law and, in particular,-non-personal data. Changes to data protection law should take place within the existing framework of the GDPR and the German Federal Data Protection Act (BDSG).

"The Data Code offers an opportunity to bring order to an increasingly complex body of data law. However, it must not become an additional set of regulations alongside existing rules", says Rabe. "Germany needs fewer overlaps, clear responsibilities and a legal framework that enables data use whilst reliably guaranteeing data protection."

eco Association therefore has clear expectations as Hennemann takes up his post: more coherent data protection supervision, greater guidance for companies and a strong voice for data law that reconciles the protection of fundamental rights, data use and innovation.

• eco Association's open letter on the appointment of the new German Federal Commissioner for Data Protection and Freedom of Information (BfDI)

• eco Association guidelines on the Data Code