Data Subject versus Regional Public Broadcasting Authority – Court Ruling (Germany, 2026)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
A German court ruled that the Regional Public Broadcasting Authority did not have to provide all personal data requested by a person who had been paying broadcasting contributions. The court decided that the authority's response was enough under the law, which is important for how public bodies handle data requests. This case shows that there are limits to what information must be shared with individuals.
What happened
The Regional Public Broadcasting Authority responded to a data request but did not provide all documents containing the person's personal data.
Who was affected
The person who had been paying broadcasting contributions and requested access to their personal data.
What the authority found
The court held that the authority's response met legal requirements and that it was not obligated to provide additional documents under the law.
Why this matters
This ruling clarifies that public authorities can limit the information they provide in response to data requests. It highlights the need for individuals to understand their rights and for authorities to communicate their obligations clearly.
GDPR Articles Cited
View original scraped data
Original data from scraper before AI verification against source document.
National Law Articles
The data subject had been liable to pay broadcasting contributions to the Controller, a German regional public broadcasting authority, since 2007. Following objections to several contribution assessment notices, the data subject submitted a request under Article 15 GDPR seeking a copy of all personal data processed about him by the Controller. The Controller responded by providing the categories of personal data and related information specified under § 11(8) of the German Broadcasting Contribution Treaty (RBStV), which governs data subject access requests relating to broadcasting contribution records, together with general privacy information. The data subject argued that the response was incomplete because it did not include copies of all documents containing his personal data, including correspondence with him and third parties. The Controller maintained that it had fully complied with its obligations under the RBStV. After the Controller declined to provide additional information, the data subject brought proceedings seeking disclosure of all personal data concerning him processed by the Controller. The Court held that § 11(8) of the German Broadcasting Contribution Treaty (RBStV) constituted a lawful restriction of the broader right of access under Article 15 GDPR pursuant to Article 23(1)(e) GDPR. It found that the national provision was a valid legislative measure, respected the essence of the fundamental right to data protection, and pursued an important public interest by ensuring the effective financing and administration of the public broadcasting system. The Court further held that the restriction was necessary and proportionate, noting that requiring the Controller to comply with the full scope of Article 15 GDPR across more than 44 million broadcasting contribution accounts would impose a disproportionate administrative and financial burden capable of undermining that public interest. The Court also held that § 11(8) RBStV satisfied the safeguards r
Outcome
Court Ruling
A ruling by a national court on a data-protection matter.
Related Cases (0)
No other cases found for Data Subject versus Regional Public Broadcasting Authority in DE
This is the only recorded case for this entity in this jurisdiction.
Details
About this data
Cite as: Cookie Fines. Data Subject versus Regional Public Broadcasting Authority - Germany (2026). Retrieved from cookiefines.eu
Last updated: