Enforcing jurisdiction
Germany · Geography does not establish applicable law.
Confirmed applicable legislation
Privacy topics

Court case 14 K 19.01274 – Court Ruling (Germany, 2021)

Court Ruling
DPA VGAnsbach22 September 2021Germany
final
Court Ruling

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

A Bavarian court ruled that a lawyer did not breach data protection laws by submitting unmasked personal data to court. The data subject claimed this was a violation of confidentiality. The court found that the lawyer's actions were necessary to pursue a legitimate fee claim.

What happened

The court ruled that the lawyer was allowed to submit personal data without masking it in court documents.

Who was affected

The data subject, who had a fee dispute with their former lawyer, was affected by the unmasked data submission.

What the authority found

The court determined that the lawyer's submission was justified under data protection laws as it was necessary for asserting a legal claim.

Why this matters

This ruling reinforces that legal claims can require the use of personal data without alteration. Businesses should be aware of the implications of sharing personal data in legal situations.

Recorded legal citations
Automatically processed
View original scraped data
Art. 77(GDPR)
Art. 78(GDPR)

Original imported citations before automated processing; the processing history does not establish independent verification.

Decision AuthorityVG Ansbach

Source checks

Linked-source text retrieved.

Automated check recorded — 18 March 2026.

Processing notes: articles corrected, national law identified.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

In December 2018, the data subject filed with the DPA (the defendant in this case), a complaint under Article 77 GDPR against a lawyer who had represented the data subject in a traffic accident, before he terminated the mandate. In court proceedings after this termination, in which the lawyer's fee claim was at issue, the lawyer had submitted to the court a volume of documents containing extracts of all correspondence with the opposing insurance company, in which personal data and business secrets had not been blacked out. Since data subject had not released the lawyer from data protection and confidentiality, the data subject perceived this to be a breach of confidentiality. By letter dated 30 March 2016, the data subject contacted the lawyer regarding this breach. The data subject also complained to the Court about the lawyer's conduct, but this did not lead to any action undertaken by the Court. DPA acknowledged receipt of the complaint by letter dated 7 January 2019. In response to this complaint dated 31 May 2019, the DPA informed the data subject that it did not see any breach of data protection law in the conduct complained of and that there was therefore no reason for further supervisory measures pursuant to Article 58 GDPR. The lawyer was under no obligation to make the data subject's data unidentifiable when forwarding it to the court. According to the DPA, this processing was legitimised under Article 6(1)(f) GDPR since the pursuit of fee claims undoubtedly constitutes a legitimate interest of the lawyer. Moreover, the DPA held that, insofar as the personal data transferred were data belonging to special categories of data within the meaning of Article 9(1) GDPR (such as information on the consequences of the accident/injuries suffered by the data subject in the accident), the additional requirements of Article 9(2) GDPR were also met, as the transfer had been necessary for the assertion of legal claims. The data subject then brought the action to the Co

Outcome

Court Ruling

A ruling by a national court on a data-protection matter.

Related Cases (0)

No other cases found for Court case 14 K 19.01274 in DE

This is the only recorded case for this entity in this jurisdiction.

Details

Ruling Date

22 September 2021

Authority

DPA VGAnsbach

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. Court case 14 K 19.01274 - Germany (2021). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: