News & Analysis as of

Germany Personal Data

Hogan Lovells

AI systems: German DPAs issue guidance on technical and organizational measures

Hogan Lovells on

On 17 June 2025, the German data protection authorities issued substantially revised guidance on technical and organizational measures for the development and operation of AI systems. Aimed at manufacturers and developers,...more

Orrick, Herrington & Sutcliffe LLP

German Federal Labor Court Grants Damages Under the GDPR for the Use of Employee Data: 7 Things for Companies to Consider

On May 8, 2025, the Federal Labor Court Bundesarbeitsgericht (“BAG”) issued a significant ruling concerning an employee’s claims for damages due to unlawful data transfers within a corporate group. The BAG ruled that works...more

DLA Piper

Germany: Works Agreements Cannot Legitimate Inadmissible Data Processing.

DLA Piper on

If employers and works councils agree on ‘more specific rules’ in a works agreement regarding the processing of employees’ personal data in the employment context (Art. 88 (1) GDPR), these must take into account the general...more

DLA Piper

Germany: Update: Judgment on Non-Material Damages for Loss of Control Over Personal Data

DLA Piper on

In its judgement of November 18, 2024 (case number VI ZR 10/24) the German Federal Court of Justice (Bundesgerichtshof – “BGH”) clarified key legal issues regarding claims for damages under Article 82 GDPR in the event of a...more

DLA Piper

Germany: Judgment on Non-Material Damages for Loss of Control Over Personal Data

DLA Piper on

On November 18, 2024, the German Federal Court of Justice (Bundesgerichtshof – “BGH”) made a (to date unpublished) judgment under the case number VI ZR 10/24 regarding claims for non-material damages pursuant to Art. 82 GDPR,...more

A&O Shearman

Baden-Wuerttemberg DPA updates guidance on processing personal data in relation to AI

A&O Shearman on

On October 17, 2024, the DPA of Baden-Wuerttemberg (LfDI) updated its discussion paper on the legal bases for processing personal data in relation to artificial intelligence (AI) (the Paper). The Paper emphasises the...more

Morgan Lewis

German Data Protection Authorities on Asset Deals: Restrictions on Data Transfers Under GDPR

Morgan Lewis on

The German Data Protection Conference (DSK) on September 11, 2024 published guidance on asset deals (the Guidelines) that distinguishes between various stages of a sale process and the relevant personal data that can be...more

DLA Piper

Europe/Germany: Right to Bring Collective Action for Violations of Information Obligations Under GDPR

DLA Piper on

Summary - In its judgement of 11 July 2024 (C-757/22), the European Court of Justice (‘ECJ’) ruled that the violation of a controller’s information obligations under Art. 12 and 13 GDPR, can be subject to a representative...more

White & Case LLP

AI implementation & data protection regulation: German authorities publish guidelines for implementing AI in compliance with the...

White & Case LLP on

The German federal and state data protection authorities published guidelines for the implementation and use of AI in compliance with the European Union's regulation of personal data ("Guidelines")....more

Hogan Lovells

AI deployment: German DPAs issue guidance on data protection compliance

Hogan Lovells on

On 6 May 2024, the German data protection authorities (“DPAs”) issued an extensive guidance paper on the GDPR compliant deployment of artificial intelligence (“AI”) applications. This article summarizes the key findings of...more

Fox Rothschild LLP

Are Test Answers Personal Data?

Fox Rothschild LLP on

Are test questions and answers personal data that needs to be provided pursuant to an access request? A German court recently weighed in, providing some good insight regarding both GDPR and U.S. state data privacy laws....more

A&O Shearman

CJEU considers approach to retention of personal data from public debt registers

A&O Shearman on

In joined Cases C‑26/22 and C‑64/22, related to the German Credit Reference Agency Schufa (see A&O blog on the automated decision making case), the CJEU considered the retention of personal data regarding individuals who had...more

Ius Laboris

Can a works council chair also be the data protection officer?

Ius Laboris on

Back in 2011, a German court ruled that works council membership did not necessarily preclude serving as data protection officer. The same court, after referring the question to the European Court of Justice, has now changed...more

Latham & Watkins LLP

Europäischer Gerichtshof ebnet den Weg für Massenklagen im Datenschutz

Latham & Watkins LLP on

Der Europäische Gerichtshof („EuGH“) legt die Anforderungen für Schadensersatz nach Art. 82 EU Datenschutz-Grundverordnung („DSGVO“) in einem neuen Urteil weit aus (Urteil vom 4. Mai 2023, C-300/21). Zwar trifft der EuGH...more

Latham & Watkins LLP

DSGVO-Bußgelder: Reicht eine „strict liability“ oder ist der Nachweis eines Verschuldens nötig?

Latham & Watkins LLP on

Der Europäische Gerichtshof (EuGH) wird bald darüber entscheiden, ob europäische Datenschutzbehörden künftig leichter Bußgelder nach Art. 83 DSGVO gegen Unternehmen verhängen können. Diese Entscheidung kann großen Einfluss...more

A&O Shearman

DSK publishes decision on access by third country public authorities to data processed by processors in the EEA

A&O Shearman on

The German Data Protection Conference of supervisory authorities (DSK) issued a decision on how to evaluate the risk of personal data being accessed by non-EEA public authorities, or by a parent company, when processed by a...more

Hogan Lovells

Hamburg DPA issues optimistic stance on Executive Order for EU-U.S. Data Privacy Framework

Hogan Lovells on

The Data Protection Authority (“DPA”) of the German state Hamburg is one of the first European DPA to publish an optimistic assessment on the U.S. Executive Order on “Enhancing Safeguards for United States Signals...more

Latham & Watkins LLP

Trendwende bei datenschutzrechtlichen Sammelklagen? Generalanwalt stellt hohe Anforderungen an immateriellen Schadensersatz nach...

Latham & Watkins LLP on

Das Umfeld für datenschutzrechtliche Sammelklagen wird seit Jahren immer klägerfreundlicher. Gerade die Geltendmachung von immateriellen Schadensersatzansprüchen nach Art. 82 DSGVO hat sich zu einem beliebten Geschäftsfeld...more

A&O Shearman

Germany – Schrems II: German court overturns presumption of international data transfer from EU-subsidiary to non-EU parent...

A&O Shearman on

On 13 July 2022, the Public Procurement Chamber of the German state of Baden-Württemberg (the Public Procurement Chamber) issued a decision confirming that personal data processed by an EU subsidiary of a parent entity...more

K&L Gates LLP

Brussels Regulatory Brief: April 2022

K&L Gates LLP on

ANTITRUST AND COMPETITION - The Commission and the German Competition Authority conducted surprise inspections in Germany for suspected abuse of a dominant position in the natural gas sector....more

Latham & Watkins LLP

EuGH gibt Rückenwind für Datenschutz-Sammelklagen

Latham & Watkins LLP on

Der EuGH hat Ende April die Klagebefugnisse von Verbraucherschutzverbänden gestärkt, weitere richtungsweisende Entscheidungen stehen bevor.  Seit dem Inkrafttreten der europäischen Datenschutz-Grundverordnung (DSGVO)...more

Morgan Lewis - Tech & Sourcing

Germany Updates Privacy Guidance through Unfair Competition Act

The German Conference of DPAs (the DSK) has released new (legally non-binding) detailed Guidelines dated February 18, 2022 with respect to direct marketing in Germany. ...more

Hogan Lovells

German Court grants non-material GDPR damages following data breach

Hogan Lovells on

In a recent judgment, the District Court Munich I granted a data subject compensation under Article 82 GDPR for non-material damages suffered as a result of an unauthorized third-party access to the subject's personal data....more

Fox Rothschild LLP

You Use A US-based Sub Processor, You Lose, German Court says

Fox Rothschild LLP on

If you use a U.S.-based sub processor (even for data processed in the EU), you lose, the German administrative court of Wiesbaden said in an interim decision. No transfer. No worries. TIA anyway...more

Latham & Watkins LLP

DSGVO-Schadensersatz: Bundesarbeitsgericht legt Europäischem Gerichtshof wesentliche Fragen zur Anwendung von Art. 82 DSGVO vor

Latham & Watkins LLP on

Immer mehr Kläger fordern immateriellen Schadensersatz von Unternehmen, die ihre personenbezogenen Daten verarbeiten. Dementsprechend kommen auch immer mehr Fälle vor Gericht....more

110 Results
 / 
View per page
Page: of 5

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
- hide
- hide