Region: Germany

German regulators publish expert opinion on US surveillance risk

The expert opinion will guide German regulators’ approach to the risk that personal data transferred to the US will be intercepted.

26 January 2022

ECJ to weigh in on DPO dismissals

The European Court of Justice is set to clarify the conditions under which data protection officers can be dismissed, following three separate referrals from the German federal labour court.

14 January 2022

ECJ advocate-general says consumer groups can sue Facebook

A European Court of Justice official has supported the right of consumer groups to launch data protection lawsuits, potentially opening a new front in GDPR battles against Facebook and others across the EU.

02 December 2021

ECJ urged to restate data retention rules – again

A European Court of Justice advocate-general has reiterated that member states’ bulk data interception could breach EU law.

18 November 2021

German government says GDPR fines can’t be directly issued against companies

Germany’s Federal Ministry of the Interior has sided with a previous German court decision that would limit the availability of corporate GDPR fines.

08 November 2021

German court expands SAR rights

A German court has ruled that copies of emails are covered by GDPR subject access requests.

15 October 2021

German court reverses GDPR burden of proof

A German court has held that data controllers need to demonstrate their compliance with data processing rules – potentially paving the way for a shift in European data breach complaints.

27 September 2021

Second German court refers non-material damages question to ECJ

Germany’s highest employment law tribunal has requested a European Court of Justice ruling on non-material damages under the GDPR – months after an Austrian court and a separate German court made similar references.

16 September 2021

Noyb seeks to topple cookie paywalls

Privacy NGO Noyb says subscriptions that remove cookie-based tracking breach GDPR consent rules, despite a previous decision from Austria’s data watchdog that greenlit these practices.

17 August 2021

GDPR fines: shame but don't name?

German judges have moved away from publicising the names of companies alleged to have breached GDPR rules on the grounds that this causes unwarranted reputational and competitive damage. Fieldfisher Hamburg partner Dennis Hillemann analyses the implications.

16 July 2021

Get unlimited access to all Global Data Review content