Court case 42 K 25/25 – Court Ruling (Germany, 2026)

Court Ruling
DPA VGBerlin17 June 2026Germany
final
Court Ruling

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

Another German court ruled that a Jehovah’s Witnesses congregation must allow members to see their personal data. This is important because it emphasizes the right of individuals to know what information is held about them, even in religious contexts.

What happened

The court mandated that the congregation provide access to an introductory letter containing personal data of two members.

Who was affected

Two members of the congregation who sought access to their personal data after it was shared without their consent.

What the authority found

The court decided that the congregation's refusal to provide access to the letter was unjustified under privacy laws.

Why this matters

This case reinforces the principle that individuals have the right to access their personal information. It serves as a reminder for all organizations to respect these rights.

GDPR Articles Cited

AI-verified

Art. 15(1) GDPR
Art. 15(3) GDPR
View original scraped data
Art. 15(1) GDPR
Art. 15(3) GDPR
Art. 91(1) GDPR

Original data from scraper before AI verification against source document.

National Law Articles

AI-identified

DSGJZ
Decision AuthorityAdministrative Court of Berlin
Reviewed AuthorityDPA
Source verified 11 August 2026
articles corrected
national law identified
authority corrected
Full Legal Summary
Detailed

A Jehovah’s Witnesses congregation (the controller) sent another congregation an introductory letter containing the personal data of two members (the data subjects) who were changing congregations from the controller to the recipient. The data subjects did not receive a copy of this letter despite their request. They filed a complaint with the DPA in July 2023, stating that their right of access under the GDPR had been violated. The controller argued that providing access to the introductory letter would undermine confidentiality required by religious law. According to the controller, restricting the right of access was necessary to allow the elders of the congregations to fulfill their biblical mandate to care for the members as shepherds of God’s flock. The controller only provided the data subjects a short list of information about them contained in the letter. The DPA dismissed the complaint as unfounded in May 2024. It held that the restriction to the right of access was justified under Article 91(1) GDPR and the national Jehovah’s Witnesses Data Protection Act (DSGJZ), as providing access would jeopardise the religious community’s ability to fulfill its mission. The data subjects filed a lawsuit before the Administrative Court of Berlin in May 2024, claiming the right to obtain a copy of the introductory letter. The court ordered the controller to provide the data subjects access to their personal data undergoing processing by handing over a copy of the introductory letter addressed to the data subjects’ new congregation. First, the court referred to the principle of primacy of EU law and held that Article 91(1) GDPR gives precedence to the data protection rules of religious associations or communities only insofar as these rules comply with the GDPR. Second, the court concluded that the data subjects were entitled to receive the requested copy pursuant to Article 15(1) GDPR in conjunction with Article 15(3) GDPR. The court considered a merely abstract over

Outcome

Court Ruling

A ruling by a national court on a data-protection matter.

Related Cases (0)

No other cases found for Court case 42 K 25/25 in DE

This is the only recorded case for this entity in this jurisdiction.

Details

Ruling Date

17 June 2026

Authority

DPA VGBerlin

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Court case 42 K 25/25 - Germany (2026). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: