{"id":28550,"date":"2011-12-13T00:12:34","date_gmt":"2011-12-13T00:12:34","guid":{"rendered":"http:\/\/www.2b-advice.com\/en\/blog\/de\/blog\/in-welche-richtung-geht-datenschutz-in-2020-copy-copy-copy-2\/"},"modified":"2026-08-11T13:02:18","modified_gmt":"2026-08-11T11:02:18","slug":"what-direction-will-data-protection-take-in-2020-copy-copy-copy-copy-2","status":"publish","type":"post","link":"https:\/\/2b-advice.com\/en\/2011\/12\/13\/vier-augen-prinzip-datenschutz\/","title":{"rendered":"Four-eyes principle in data protection"},"content":{"rendered":"
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Model for data protection officers<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

The dual-control principle means that important actions should not be the sole responsibility of, or carried out by, a single person. The goal is to limit errors and opportunities for abuse, since the likelihood that a single person will be compromised is higher than the likelihood that two people will act in a fraudulent manner together.<\/strong><\/p>

The principle originally stems from quality management and authentication, but is also becoming increasingly important in the field of data protection.<\/p>

A classic example of this principle is the so-called \u201csecond opinion\u201d in the field of medical decision-making. But dual-control procedures can also be found in banking and government administration.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t

The dual-control principle in its symmetric and asymmetric forms<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

For the data protection officer, the dual-control principle plays a particularly important role in, among other things, the design of a rights and roles framework\u2014especially with regard to administrator rights\u2014as well as in documenting deletion processes.<\/p>

For example, this can be stipulated in the company\u2019s data protection policies. This ensures that access to the email archive is granted only when two administrators are logged in. However, when implementing this, there is a risk that controls may become superficial if those responsible rely on one another. Therefore, a hierarchical organizational structure should also be maintained in accordance with the dual-control principle.<\/p>

Standard software such as SAP has implemented the dual-control principle\u2014particularly for HR infotypes\u2014when modifying infotypes using so-called lock indicators. A data record thus exists but is not considered complete until another authorized user unlocks it. This process can be configured in both a symmetric and an asymmetric variant.<\/p>

In the asymmetric variant, a user can create, modify, and delete records. These records are initially locked automatically. Another user can, in turn, lock and unlock them. Once User B has unlocked the records, User A can no longer modify them. This would only be possible again if User B locks the records once more.<\/p>

In the symmetric version, both users have the same permissions, but these are reciprocal; that is, the user who created the records cannot grant access to them.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t

Implement the dual-control principle as TOM<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Even though the GDPR does not expressly require the dual-control principle, it may constitute an appropriate means of ensuring the security of processing within the framework of the technical and organizational measures (TOM) under Article 32 of the GDPR.<\/p>

In particular, when granting and using privileged access rights, approving authorization policies, exporting large datasets, or permanently deleting personal data, the dual-control principle can help reduce the risk of operational errors, misuse, and unauthorized access.<\/p>

Companies should therefore assess, as part of their risk analysis, for which processing operations additional oversight by a second person is appropriate and proportionate.<\/p>

Further information: BSI Information Security Audit Guide, Version 4.0<\/a><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"

Model for Data Protection Officers: The dual-control principle means that important measures should not be the sole responsibility of a single person or carried out by a single person. The goal is to limit errors and opportunities for abuse, since the likelihood that a single person will be compromised is higher than the likelihood that two people will act maliciously together. The principle originally stems from quality management and authentication, but is gaining \u2026<\/p>","protected":false},"author":1,"featured_media":28516,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[13],"tags":[],"class_list":["post-28550","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-datenschutz-unternehmen"],"yoast_head":"\nVier-Augen-Prinzip im Datenschutz | 2B Advice Blog<\/title>\n<meta name=\"description\" content=\"Das Vier-Augen-Prinzip im Datenschutz bedeutet, das wichtige Ma\u00dfnahmen nicht allein von einer einzelnen Person verantwortet oder durchgef\u00fchrt werden sollen.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/2b-advice.com\/en\/2011\/12\/13\/two-eye-principle-for-data-protection\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Vier-Augen-Prinzip im Datenschutz | 2B Advice Blog\" \/>\n<meta property=\"og:description\" content=\"Das Vier-Augen-Prinzip im Datenschutz bedeutet, das wichtige Ma\u00dfnahmen nicht allein von einer einzelnen Person verantwortet oder durchgef\u00fchrt werden sollen.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/2b-advice.com\/en\/2011\/12\/13\/two-eye-principle-for-data-protection\/\" \/>\n<meta property=\"og:site_name\" content=\"Ailance\" \/>\n<meta property=\"article:published_time\" content=\"2011-12-13T00:12:34+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-08-11T11:02:18+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/2b-advice.com\/wp-content\/uploads\/2019\/12\/Vier-Augen-Prinzip-Datenschutz.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1920\" \/>\n\t<meta property=\"og:image:height\" content=\"395\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"2BAdviceAilance\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"2BAdviceAilance\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/2011\\\/12\\\/13\\\/vier-augen-prinzip-datenschutz\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/2011\\\/12\\\/13\\\/vier-augen-prinzip-datenschutz\\\/\"},\"author\":{\"name\":\"2BAdviceAilance\",\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/#\\\/schema\\\/person\\\/3288798779afc19fd56581c31f3b8ff8\"},\"headline\":\"Vier-Augen-Prinzip im Datenschutz\",\"datePublished\":\"2011-12-13T00:12:34+00:00\",\"dateModified\":\"2026-08-11T11:02:18+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/2011\\\/12\\\/13\\\/vier-augen-prinzip-datenschutz\\\/\"},\"wordCount\":456,\"publisher\":{\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/2011\\\/12\\\/13\\\/vier-augen-prinzip-datenschutz\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/2b-advice.com\\\/wp-content\\\/uploads\\\/2019\\\/12\\\/Vier-Augen-Prinzip-Datenschutz.jpg\",\"articleSection\":[\"Datenschutz\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/2011\\\/12\\\/13\\\/vier-augen-prinzip-datenschutz\\\/\",\"url\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/2011\\\/12\\\/13\\\/vier-augen-prinzip-datenschutz\\\/\",\"name\":\"Vier-Augen-Prinzip im Datenschutz | 2B Advice Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/2011\\\/12\\\/13\\\/vier-augen-prinzip-datenschutz\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/2011\\\/12\\\/13\\\/vier-augen-prinzip-datenschutz\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/2b-advice.com\\\/wp-content\\\/uploads\\\/2019\\\/12\\\/Vier-Augen-Prinzip-Datenschutz.jpg\",\"datePublished\":\"2011-12-13T00:12:34+00:00\",\"dateModified\":\"2026-08-11T11:02:18+00:00\",\"description\":\"Das Vier-Augen-Prinzip im Datenschutz bedeutet, das wichtige Ma\u00dfnahmen nicht allein von einer einzelnen Person verantwortet oder durchgef\u00fchrt werden sollen.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/2011\\\/12\\\/13\\\/vier-augen-prinzip-datenschutz\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/2b-advice.com\\\/en\\\/2011\\\/12\\\/13\\\/vier-augen-prinzip-datenschutz\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/2011\\\/12\\\/13\\\/vier-augen-prinzip-datenschutz\\\/#primaryimage\",\"url\":\"https:\\\/\\\/2b-advice.com\\\/wp-content\\\/uploads\\\/2019\\\/12\\\/Vier-Augen-Prinzip-Datenschutz.jpg\",\"contentUrl\":\"https:\\\/\\\/2b-advice.com\\\/wp-content\\\/uploads\\\/2019\\\/12\\\/Vier-Augen-Prinzip-Datenschutz.jpg\",\"width\":1920,\"height\":395,\"caption\":\"Vier-Augen-Prinzip im Datenschutz.\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/2011\\\/12\\\/13\\\/vier-augen-prinzip-datenschutz\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/2b-advice.com\\\/de\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Vier-Augen-Prinzip im Datenschutz\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/\",\"name\":\"2B Advice\",\"description\":\"By 2B Advice\",\"publisher\":{\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/#organization\",\"name\":\"2B Advice GmbH\",\"url\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/2b-advice.com\\\/wp-content\\\/uploads\\\/2024\\\/02\\\/Ailance_Logo_Yellow_White_large_RGB.png\",\"contentUrl\":\"https:\\\/\\\/2b-advice.com\\\/wp-content\\\/uploads\\\/2024\\\/02\\\/Ailance_Logo_Yellow_White_large_RGB.png\",\"width\":287,\"height\":401,\"caption\":\"2B Advice GmbH\"},\"image\":{\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/company\\\/2b-advice-group\\\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/2b-advice.com\\\/en\\\/#\\\/schema\\\/person\\\/3288798779afc19fd56581c31f3b8ff8\",\"name\":\"2BAdviceAilance\",\"sameAs\":[\"https:\\\/\\\/2b-advice.com\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Four-eyes principle in data protection | 2B Advice Blog","description":"The dual control principle in data protection means that important measures should not be the sole responsibility of a single person.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/2b-advice.com\/en\/2011\/12\/13\/two-eye-principle-for-data-protection\/","og_locale":"en_US","og_type":"article","og_title":"Vier-Augen-Prinzip im Datenschutz | 2B Advice Blog","og_description":"Das Vier-Augen-Prinzip im Datenschutz bedeutet, das wichtige Ma\u00dfnahmen nicht allein von einer einzelnen Person verantwortet oder durchgef\u00fchrt werden sollen.","og_url":"https:\/\/2b-advice.com\/en\/2011\/12\/13\/two-eye-principle-for-data-protection\/","og_site_name":"Ailance","article_published_time":"2011-12-13T00:12:34+00:00","article_modified_time":"2026-08-11T11:02:18+00:00","og_image":[{"width":1920,"height":395,"url":"https:\/\/2b-advice.com\/wp-content\/uploads\/2019\/12\/Vier-Augen-Prinzip-Datenschutz.jpg","type":"image\/jpeg"}],"author":"2BAdviceAilance","twitter_card":"summary_large_image","twitter_misc":{"Written by":"2BAdviceAilance","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/2b-advice.com\/en\/2011\/12\/13\/vier-augen-prinzip-datenschutz\/#article","isPartOf":{"@id":"https:\/\/2b-advice.com\/en\/2011\/12\/13\/vier-augen-prinzip-datenschutz\/"},"author":{"name":"2BAdviceAilance","@id":"https:\/\/2b-advice.com\/en\/#\/schema\/person\/3288798779afc19fd56581c31f3b8ff8"},"headline":"Vier-Augen-Prinzip im Datenschutz","datePublished":"2011-12-13T00:12:34+00:00","dateModified":"2026-08-11T11:02:18+00:00","mainEntityOfPage":{"@id":"https:\/\/2b-advice.com\/en\/2011\/12\/13\/vier-augen-prinzip-datenschutz\/"},"wordCount":456,"publisher":{"@id":"https:\/\/2b-advice.com\/en\/#organization"},"image":{"@id":"https:\/\/2b-advice.com\/en\/2011\/12\/13\/vier-augen-prinzip-datenschutz\/#primaryimage"},"thumbnailUrl":"https:\/\/2b-advice.com\/wp-content\/uploads\/2019\/12\/Vier-Augen-Prinzip-Datenschutz.jpg","articleSection":["Datenschutz"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/2b-advice.com\/en\/2011\/12\/13\/vier-augen-prinzip-datenschutz\/","url":"https:\/\/2b-advice.com\/en\/2011\/12\/13\/vier-augen-prinzip-datenschutz\/","name":"Four-eyes principle in data protection | 2B Advice Blog","isPartOf":{"@id":"https:\/\/2b-advice.com\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/2b-advice.com\/en\/2011\/12\/13\/vier-augen-prinzip-datenschutz\/#primaryimage"},"image":{"@id":"https:\/\/2b-advice.com\/en\/2011\/12\/13\/vier-augen-prinzip-datenschutz\/#primaryimage"},"thumbnailUrl":"https:\/\/2b-advice.com\/wp-content\/uploads\/2019\/12\/Vier-Augen-Prinzip-Datenschutz.jpg","datePublished":"2011-12-13T00:12:34+00:00","dateModified":"2026-08-11T11:02:18+00:00","description":"The dual control principle in data protection means that important measures should not be the sole responsibility of a single person.","breadcrumb":{"@id":"https:\/\/2b-advice.com\/en\/2011\/12\/13\/vier-augen-prinzip-datenschutz\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/2b-advice.com\/en\/2011\/12\/13\/vier-augen-prinzip-datenschutz\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/2b-advice.com\/en\/2011\/12\/13\/vier-augen-prinzip-datenschutz\/#primaryimage","url":"https:\/\/2b-advice.com\/wp-content\/uploads\/2019\/12\/Vier-Augen-Prinzip-Datenschutz.jpg","contentUrl":"https:\/\/2b-advice.com\/wp-content\/uploads\/2019\/12\/Vier-Augen-Prinzip-Datenschutz.jpg","width":1920,"height":395,"caption":"Vier-Augen-Prinzip im Datenschutz."},{"@type":"BreadcrumbList","@id":"https:\/\/2b-advice.com\/en\/2011\/12\/13\/vier-augen-prinzip-datenschutz\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/2b-advice.com\/de\/"},{"@type":"ListItem","position":2,"name":"Vier-Augen-Prinzip im Datenschutz"}]},{"@type":"WebSite","@id":"https:\/\/2b-advice.com\/en\/#website","url":"https:\/\/2b-advice.com\/en\/","name":"2B Advice","description":"By 2B Advice","publisher":{"@id":"https:\/\/2b-advice.com\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/2b-advice.com\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/2b-advice.com\/en\/#organization","name":"2B Advice GmbH","url":"https:\/\/2b-advice.com\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/2b-advice.com\/en\/#\/schema\/logo\/image\/","url":"https:\/\/2b-advice.com\/wp-content\/uploads\/2024\/02\/Ailance_Logo_Yellow_White_large_RGB.png","contentUrl":"https:\/\/2b-advice.com\/wp-content\/uploads\/2024\/02\/Ailance_Logo_Yellow_White_large_RGB.png","width":287,"height":401,"caption":"2B Advice GmbH"},"image":{"@id":"https:\/\/2b-advice.com\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.linkedin.com\/company\/2b-advice-group\/"]},{"@type":"Person","@id":"https:\/\/2b-advice.com\/en\/#\/schema\/person\/3288798779afc19fd56581c31f3b8ff8","name":"2BAdviceAilance","sameAs":["https:\/\/2b-advice.com"]}]}},"permalink_manager":null,"_links":{"self":[{"href":"https:\/\/2b-advice.com\/en\/wp-json\/wp\/v2\/posts\/28550","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/2b-advice.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/2b-advice.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/2b-advice.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/2b-advice.com\/en\/wp-json\/wp\/v2\/comments?post=28550"}],"version-history":[{"count":10,"href":"https:\/\/2b-advice.com\/en\/wp-json\/wp\/v2\/posts\/28550\/revisions"}],"predecessor-version":[{"id":44215,"href":"https:\/\/2b-advice.com\/en\/wp-json\/wp\/v2\/posts\/28550\/revisions\/44215"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/2b-advice.com\/en\/wp-json\/wp\/v2\/media\/28516"}],"wp:attachment":[{"href":"https:\/\/2b-advice.com\/en\/wp-json\/wp\/v2\/media?parent=28550"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/2b-advice.com\/en\/wp-json\/wp\/v2\/categories?post=28550"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/2b-advice.com\/en\/wp-json\/wp\/v2\/tags?post=28550"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}