Data Subject versus Regional Public Broadcasting Authority – Court Ruling (Germany, 2026)

Court Ruling
DPA VGMnchen18 May 2026Germany
final
Court Ruling

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

A German court ruled that a public broadcasting authority did not have to provide all personal data requested by a person regarding their broadcasting contributions. The court found that certain legal restrictions applied to the data access request. This decision highlights the balance between transparency and legal limitations on data access.

What happened

A person requested access to all personal data held by a public broadcasting authority but received limited information.

Who was affected

The individual who sought access to their personal data related to broadcasting contributions.

What the authority found

The court decided that the broadcasting authority's response complied with legal restrictions on data access.

Why this matters

This ruling illustrates that legal frameworks can limit individuals' access to their data in specific contexts. Organizations should be aware of the legal boundaries when responding to data requests.

GDPR Articles Cited

AI-verified

Art. 15(GDPR)
Art. 23(1)(e) GDPR
Art. 23(2) GDPR
View original scraped data
Art. 15(GDPR)
Art. 23(GDPR)

Original data from scraper before AI verification against source document.

National Law Articles

AI-identified

§ 11(8) RBStV
Decision AuthorityVGMnchen
Source verified 9 July 2026
articles corrected
national law identified
authority corrected
Full Legal Summary
Detailed

The data subject had been liable to pay broadcasting contributions to the Controller, a German regional public broadcasting authority, since 2007. Following objections to several contribution assessment notices, the data subject submitted a request under Article 15 GDPR seeking a copy of all personal data processed about him by the Controller. The Controller responded by providing the categories of personal data and related information specified under § 11(8) of the German Broadcasting Contribution Treaty (RBStV), which governs data subject access requests relating to broadcasting contribution records, together with general privacy information. The data subject argued that the response was incomplete because it did not include copies of all documents containing his personal data, including correspondence with him and third parties. The Controller maintained that it had fully complied with its obligations under the RBStV. After the Controller declined to provide additional information, the data subject brought proceedings seeking disclosure of all personal data concerning him processed by the Controller. The Court held that § 11(8) of the German Broadcasting Contribution Treaty (RBStV) constituted a lawful restriction of the broader right of access under Article 15 GDPR pursuant to Article 23(1)(e) GDPR. It found that the national provision was a valid legislative measure, respected the essence of the fundamental right to data protection, and pursued an important public interest by ensuring the effective financing and administration of the public broadcasting system. The Court further held that the restriction was necessary and proportionate, noting that requiring the Controller to comply with the full scope of Article 15 GDPR across more than 44 million broadcasting contribution accounts would impose a disproportionate administrative and financial burden capable of undermining that public interest. The Court also held that § 11(8) RBStV satisfied the safeguards r

Outcome

Court Ruling

A ruling by a national court on a data-protection matter.

Related Cases (0)

No other cases found for Data Subject versus Regional Public Broadcasting Authority in DE

This is the only recorded case for this entity in this jurisdiction.

Details

Ruling Date

18 May 2026

Authority

DPA VGMnchen

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Data Subject versus Regional Public Broadcasting Authority - Germany (2026). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: