Region: Germany

Deutsche Wohnen has told the ECJ that German law stopping regulators from fining companies without identifying culpable managers takes precedence over the GDPR – exposing divisions between Germany and the European Commission over the clash between GDPR fining provisions and national laws.

17 January 2023

The EU’s highest court is set to decide whether Germany’s data protection authorities must hold individual managers responsible when imposing GDPR fines.

16 January 2023

A German court has referred issues about sensitive health data to the EU’s highest court amid a pharmacists’ battle over the admissibility of data protection complaints in competition cases.

12 January 2023

Mastercard has settled damages claims following a data breach that disclosed the credit card information of 90,000 consumers, avoiding a Federal Court of Justice ruling on the GDPR burden of proof that could have affected damages claims across Europe.

05 January 2023

A Munich court has cited the Belgian regulator’s IAB right to bid decision to support a ruling that a news website’s cookie banner does not comply with data protection law.

03 January 2023

Two months into her tenure as the new head of the Berlin data protection authority, Meike Kamp tells GDR her views on the new Privacy Shield replacement and how ongoing questions about the GDPR’s interpretation should be resolved.

09 December 2022

The European Court of Justice has said search engine operators have an obligation to delist results containing inaccurate information, but that it is up to individuals seeking to enforce their right to be forgotten to prove the content is inaccurate.

08 December 2022

A German court has referred a series of questions on the scope and enforceability of access rights to the European Court of Justice.

29 November 2022

The coalition of German privacy regulators has set out a range of principles intended to underpin future data protection-compliant research based on health data.

25 November 2022

A working group led by the Bavarian data protection authority is set to publish a report finding that public authorities cannot use Microsoft 365 in a legally compliant manner.

24 November 2022