News & Analysis as of

Germany Data Protection Personal Data

Hogan Lovells

AI systems: German DPAs issue guidance on technical and organizational measures

Hogan Lovells on

On 17 June 2025, the German data protection authorities issued substantially revised guidance on technical and organizational measures for the development and operation of AI systems. Aimed at manufacturers and developers,...more

Orrick, Herrington & Sutcliffe LLP

German Federal Labor Court Grants Damages Under the GDPR for the Use of Employee Data: 7 Things for Companies to Consider

On May 8, 2025, the Federal Labor Court Bundesarbeitsgericht (“BAG”) issued a significant ruling concerning an employee’s claims for damages due to unlawful data transfers within a corporate group. The BAG ruled that works...more

DLA Piper

Germany: Works Agreements Cannot Legitimate Inadmissible Data Processing.

DLA Piper on

If employers and works councils agree on ‘more specific rules’ in a works agreement regarding the processing of employees’ personal data in the employment context (Art. 88 (1) GDPR), these must take into account the general...more

DLA Piper

Germany: Update: Judgment on Non-Material Damages for Loss of Control Over Personal Data

DLA Piper on

In its judgement of November 18, 2024 (case number VI ZR 10/24) the German Federal Court of Justice (Bundesgerichtshof – “BGH”) clarified key legal issues regarding claims for damages under Article 82 GDPR in the event of a...more

DLA Piper

Germany: Judgment on Non-Material Damages for Loss of Control Over Personal Data

DLA Piper on

On November 18, 2024, the German Federal Court of Justice (Bundesgerichtshof – “BGH”) made a (to date unpublished) judgment under the case number VI ZR 10/24 regarding claims for non-material damages pursuant to Art. 82 GDPR,...more

A&O Shearman

Baden-Wuerttemberg DPA updates guidance on processing personal data in relation to AI

A&O Shearman on

On October 17, 2024, the DPA of Baden-Wuerttemberg (LfDI) updated its discussion paper on the legal bases for processing personal data in relation to artificial intelligence (AI) (the Paper). The Paper emphasises the...more

Morgan Lewis

German Data Protection Authorities on Asset Deals: Restrictions on Data Transfers Under GDPR

Morgan Lewis on

The German Data Protection Conference (DSK) on September 11, 2024 published guidance on asset deals (the Guidelines) that distinguishes between various stages of a sale process and the relevant personal data that can be...more

DLA Piper

Europe/Germany: Right to Bring Collective Action for Violations of Information Obligations Under GDPR

DLA Piper on

Summary - In its judgement of 11 July 2024 (C-757/22), the European Court of Justice (‘ECJ’) ruled that the violation of a controller’s information obligations under Art. 12 and 13 GDPR, can be subject to a representative...more

White & Case LLP

AI implementation & data protection regulation: German authorities publish guidelines for implementing AI in compliance with the...

White & Case LLP on

The German federal and state data protection authorities published guidelines for the implementation and use of AI in compliance with the European Union's regulation of personal data ("Guidelines")....more

Hogan Lovells

AI deployment: German DPAs issue guidance on data protection compliance

Hogan Lovells on

On 6 May 2024, the German data protection authorities (“DPAs”) issued an extensive guidance paper on the GDPR compliant deployment of artificial intelligence (“AI”) applications. This article summarizes the key findings of...more

A&O Shearman

CJEU considers approach to retention of personal data from public debt registers

A&O Shearman on

In joined Cases C‑26/22 and C‑64/22, related to the German Credit Reference Agency Schufa (see A&O blog on the automated decision making case), the CJEU considered the retention of personal data regarding individuals who had...more

Ius Laboris

Can a works council chair also be the data protection officer?

Ius Laboris on

Back in 2011, a German court ruled that works council membership did not necessarily preclude serving as data protection officer. The same court, after referring the question to the European Court of Justice, has now changed...more

A&O Shearman

DSK publishes decision on access by third country public authorities to data processed by processors in the EEA

A&O Shearman on

The German Data Protection Conference of supervisory authorities (DSK) issued a decision on how to evaluate the risk of personal data being accessed by non-EEA public authorities, or by a parent company, when processed by a...more

Latham & Watkins LLP

Trendwende bei datenschutzrechtlichen Sammelklagen? Generalanwalt stellt hohe Anforderungen an immateriellen Schadensersatz nach...

Latham & Watkins LLP on

Das Umfeld für datenschutzrechtliche Sammelklagen wird seit Jahren immer klägerfreundlicher. Gerade die Geltendmachung von immateriellen Schadensersatzansprüchen nach Art. 82 DSGVO hat sich zu einem beliebten Geschäftsfeld...more

A&O Shearman

Germany – Schrems II: German court overturns presumption of international data transfer from EU-subsidiary to non-EU parent...

A&O Shearman on

On 13 July 2022, the Public Procurement Chamber of the German state of Baden-Württemberg (the Public Procurement Chamber) issued a decision confirming that personal data processed by an EU subsidiary of a parent entity...more

Latham & Watkins LLP

EuGH gibt Rückenwind für Datenschutz-Sammelklagen

Latham & Watkins LLP on

Der EuGH hat Ende April die Klagebefugnisse von Verbraucherschutzverbänden gestärkt, weitere richtungsweisende Entscheidungen stehen bevor.  Seit dem Inkrafttreten der europäischen Datenschutz-Grundverordnung (DSGVO)...more

Morgan Lewis - Tech & Sourcing

Germany Updates Privacy Guidance through Unfair Competition Act

The German Conference of DPAs (the DSK) has released new (legally non-binding) detailed Guidelines dated February 18, 2022 with respect to direct marketing in Germany. ...more

Hogan Lovells

German Court grants non-material GDPR damages following data breach

Hogan Lovells on

In a recent judgment, the District Court Munich I granted a data subject compensation under Article 82 GDPR for non-material damages suffered as a result of an unauthorized third-party access to the subject's personal data....more

Ogletree, Deakins, Nash, Smoak & Stewart,...

Germany’s Works Constitution Act: Important Changes to the Law Effective June 2021

The Act to Promote Works Council Elections and Works Council Activities in a Digital Working World (which is also known as the “Works Council Modernization Act” or Betriebsrätemodernisierungsgesetz) went into effect in...more

Hogan Lovells

International data transfers under scrutiny: German DPAs launch joint multi-state audits

Hogan Lovells on

At the beginning of the year, the German data protection authorities (DPAs) announced that they would take joint action to enforce the decision of the European Court of Justice (ECJ) in the "Schrems II" case. On June 1,...more

McDermott Will & Emery

Datenschutz: Betriebsvereinbarungen als Rechtsgrundlage für nicht erforderliche Verarbeitungen von Beschäftigtendaten

McDermott Will & Emery on

Das Landesarbeitsgericht Baden-Württemberg hat sich mit Urteil vom 25. Februar 2020 (Az. 17 Sa 37/20) u.a. zu Betriebsvereinbarungen als Erlaubnistatbestand für nicht erforderliche Verarbeitungen personenbezogener Daten...more

Epiq

Comply or Get Fined: 2020 GDPR Fines are the Highest on Record

Epiq on

The European Union’s (EU) General Data Protection Regulation (GDPR) has been in effect since May 2018. The law’s goal of protecting EU citizens’ personal information and privacy seems to be coming into fruition. In the past,...more

Hogan Lovells

German court drastically reduces GDPR fine

Hogan Lovells on

Germany has seen a couple of record GDPR fines since the German Data Protection Authorities (DPA) issued their guidance paper on how to measure GDPR fines in October 2019. One of these DPA sanctions was recently subject to...more

Hogan Lovells

Germany: New case-law on immaterial damages for GDPR infringements

Hogan Lovells on

When it comes to infringements of the EU General Data Protection Regulation (GDPR), the first thing that comes to mind are proceedings and fines imposed by the data protection authorities. It is often neglected that GDPR...more

Latham & Watkins LLP

Die Rechtsprechung der Arbeitsgerichte unter der DSGVO: Auf was sollten Unternehmen achten?

Latham & Watkins LLP on

Die Vorgaben der DSGVO gelten bekanntlich auch für Datenverarbeitungen im Beschäftigungskontext. Viele Rechtsfrage warten in diesem Bereich noch auf eine gerichtliche Klärung....more

48 Results
 / 
View per page
Page: of 2

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
- hide
- hide