To guarantee compliance of the project with data protection legislation it is essential to put the project consortium in the position to audit such compliance. To achieve this and to provide for patients only one contact point in case of violation of privacy all data processing within ACGT is under control of one central data controller. Therefore an authority, the ACGT Center for Data Protection (CDP), was established that is both legally able to enter into binding contracts with the project participants and empowered to inflict a penalty for infringement.