Court case 15 K 118/20 – Court Ruling (Germany, 2021)

Court Ruling
DPA FGMnchen4 November 2021Germany
final
Court Ruling

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

A person asked the Munich tax office for all their tax data, but the office only provided some information. The court decided the tax office had given enough data to meet GDPR rules. This case shows that tax offices don't have to share every detail, just enough to comply with privacy laws.

What happened

A person requested full access to their tax data from the Munich tax office, which provided only partial information.

Who was affected

Individuals requesting their personal tax data from the Munich tax office.

What the authority found

The court found that the tax office met its GDPR obligations by providing sufficient data, even if not all requested details were shared.

Why this matters

This ruling clarifies that tax offices must balance transparency with privacy, providing enough data to comply with GDPR without disclosing everything. It highlights the limits of data access rights under GDPR.

GDPR Articles Cited

Art. 4(7) GDPR
Art. 15(1) GDPR

National Law Articles

§ 30 AO
Decision AuthorityFG München
Full Legal Summary
Detailed

The data subject requested information on all data processed by the tax office, invoking Article 15 GDPR, in particular a complete colour copy of the tax files including all side files and the internal comments on all data processed by the tax office. The data subject accused the tax office of file manipulation as well as "recording false data". The tax office provided the data subject with copies of all current tax assessments, a printout of the tax collection account, as well as a basic data overview and an overview of the electronic record. It refused to provide further information. At the hearing, the tax office submitted extensive further printouts from its databases, but still refused to provide information on any assessment-related data, tax audits and risk management system data and, in particular, a copy of the tax files. The court had to decide whether tax offices are obliged to grant full access to tax files under Article 15(1) GDPR. The Tax Court of Munich (Finanzgericht München - FG München) held that by handing over the additional copies of its databases at the court hearing, the tax office fulfilled its duty under Article 15(1) GDPR. The data subject was not entitled to further disclosure. On the applicability of the GDPR: The court determined that the GDPR and the data protection provisions of the German General Tax Code (AO) are applicable to the processing of personal data by tax offices. By referring to its previous decision (FG München 15 K 81/20) the court confirmed that the area of direct taxation is not excluded from the scope of the GDPR under Article 2(2)(a) GDPR. Furthermore, the court extensively discussed the material scope of application according to Article 2(1) GDPR. At first, it referred to the decisions of the CJEU in C-434/16 and C-141/12+C-372/12 to establish that only legal evaluations do not constitute personal data but all other content referring to the fiscal situation of the data subjects does. This includes all assessm

Outcome

Court Ruling

A ruling by a national court on a data-protection matter.

Related Cases (0)

No other cases found for Court case 15 K 118/20 in DE

This is the only recorded case for this entity in this jurisdiction.

Details

Ruling Date

4 November 2021

Authority

DPA FGMnchen

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Court case 15 K 118/20 - Germany (2021). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: