Popular, Germany, Personal Data

Workday Ruling: How Europe’s Top Courts Raised the Bar for Employee Data Protection

Fisher Phillips on 7/24/2025

Cloud-based HR systems have become standard for multinational businesses, driving efficiency but also increasing compliance and privacy risks. Indeed, a recent Workday case, which originated in Germany, has clarified the...more

AI deployment: German DPAs issue guidance on data protection compliance

Hogan Lovells on 5/8/2024

On 6 May 2024, the German data protection authorities (“DPAs”) issued an extensive guidance paper on the GDPR compliant deployment of artificial intelligence (“AI”) applications. This article summarizes the key findings of...more

German Court grants non-material GDPR damages following data breach

Hogan Lovells on 2/2/2022

In a recent judgment, the District Court Munich I granted a data subject compensation under Article 82 GDPR for non-material damages suffered as a result of an unauthorized third-party access to the subject's personal data....more

The end of dark patterns in “cookie walls”: German court bans deceptive designs

Spirit Legal on 1/21/2021

Website operators are not permitted to use cookies and similar tracking technologies for analysis and marketing purposes without the informed consent of users, if this involves sharing personal data with third parties and...more

Tesla-Fahrzeuge sind wie Elefanten - umweltfreundlich und mit einem langen Daten-Gedächtnis ausgestattet

Spirit Legal on 11/2/2020

Zusammenfassung des Gutenachtens über die Datenverarbeitung und den Datenschutz bei Tesla Fahrzeugen vom 19.10.2020 - „Tesla-Fahrzeuge sind dauernd aktive Datenschleudern mit Langzeitgedächtnis.“ (Weichert, Gutachten über...more

They might be seen as green, but Teslas are like elephants – they never forget

Spirit Legal on 11/2/2020

Summary of expert opinion on data processing and data protection in Tesla vehicles of 19 October 2020 - “Teslas continuously gush data and have a long memory” (translation of Weichert, Gutachten über Datenverarbeitung und...more

Germany: New case-law on immaterial damages for GDPR infringements

Hogan Lovells on 10/26/2020

When it comes to infringements of the EU General Data Protection Regulation (GDPR), the first thing that comes to mind are proceedings and fines imposed by the data protection authorities. It is often neglected that GDPR...more

Germany's Highest Antitrust Court Published the Detailed Written Statement of Reasons of its Facebook-Decision -- With...

K&L Gates LLP on 9/10/2020

On 23 June 2020 the German Federal Court of Justice (Bundesgerichtshof, BGH) orally announced its decision in the interim proceedings initiated by Facebook against the prohibition and cessation orders of the German Federal...more

Coronavirus v. GDPR: Suspending Data Privacy Protection During Civil Crisis - The eData Guide To GDPR

Morgan Lewis on 3/10/2020

The EU General Data Protection Regulation allows the temporary suspension of some data-protection rights in times of crisis, such as the outbreak of the 2019 Novel Coronavirus. This installment of The eData Guide to GDPR...more

GDPR Enforcement Update: Increasing Fines Expected from German DPAs | HL Chronicle of Data Protection

Hogan Lovells on 2/25/2019

Many companies have been struggling with GDPR implementation over the past two years, putting much effort into new roles, privacy concepts, and workflows. ...more

GDPR Enforcement Update: Increasing Fines Expected from German DPAs

Hogan Lovells on 2/22/2019

Many companies have been struggling with GDPR implementation over the past two years, putting much effort into new roles, privacy concepts, and workflows. ...more

German Parliament Passes New Federal Data Protection Act

Hogan Lovells on 5/4/2017

On 27 April 2017 the German Parliament passed an entirely new Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG). The new BDSG replaces the old BDSG, which has been in force for the last 40 years. The new BDSG shall...more

ECJ Declares IP Addresses are Personal Data

Alston & Bird on 10/20/2016

Today, the European Court of Justice (ECJ) issued its long-awaited decision in Breyer v. Germany. Breyer addresses the question of whether IP addresses are “personal data” for purposes of EU data protection law. As is...more

"Privacy & Cybersecurity Update - September 2016"

Skadden, Arps, Slate, Meagher & Flom LLP on 10/3/2016

In this edition of our Privacy & Cybersecurity Update, we examine the Sixth Circuit's decision to allow injury-in-fact to be established by alleging a "substantial risk of harm" in a data breach case, New York state's...more

First Privacy Shield Guidelines for Companies published by German DPA

Orrick, Herrington & Sutcliffe LLP on 9/26/2016

On September 12, 2016, the Data Protection Authority of the German Federal State of North Rhine-Westphalia (“DPA NRW”) became one of the first EU data protection authorities to issue guidance on the implementation of the...more

German Data Protection Authority Issues Fines for Unlawful Cross-Atlantic Data Transfers

BakerHostetler on 6/10/2016

The Data Protection Authority of Hamburg, Germany has made good on its promise to audit cross-Atlantic data transfers in the wake of the October 2015 Safe Harbor decision. On June 6, the Hamburg DPA announced that it had...more

Data transfers in limbo – U.S. companies face fines by German data protection authorities

Orrick, Herrington & Sutcliffe LLP on 5/11/2016

While EU regulators determine whether to adopt a new agreement for transfers of personal data from Europe to the United States to replace the invalid EU-U.S. Safe Harbor Framework, German data protection authorities have not...more

"German Competition Regulator Investigates Facebook for Alleged Violation of Data Protection Laws"

Skadden, Arps, Slate, Meagher & Flom LLP on 3/11/2016

The German Federal Cartel Office (the FCO) has announced that it has initiated proceedings against Facebook for the company’s alleged abuse of its dominant position in a market for social networks. The FCO appears to...more

No Safe Harbour? Immediate Implications for Employers

Seyfarth Shaw LLP on 10/19/2015

A landmark decision of the European Court of Justice (ECJ) has held that companies may no longer rely on “Safe Harbour” to justify transferring personal data from the European Union to the US, because the US Government has a...more

A German DPA Questions the Validity of the Use of Consent and Model Contractual Clauses to Transfer Personal Data to the U.S.

Proskauer - Privacy & Cybersecurity on 10/19/2015

Just one week after the milestone decision rendered by the CJEU to invalidate the Safe Harbor program established 15 years ago between the U.S. and the EU to facilitate the transfer of personal data from the EU to the U.S., a...more

Today's Popular Updates › Germany › Personal Data

"My best business intelligence, in one easy email…"