Enforcing jurisdiction
Germany · Geography does not establish applicable law.
Confirmed applicable legislation

Bundesbeauftragter für den Datenschutz und die Informationsfreiheit (Germany) – Court Ruling (Germany, 2021)

Court Ruling
DPA VGKln10 November 2021Germany
final
Court Ruling

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

A German court ruled that the Job Centre of Diepholz did not need to immediately rehire its dismissed Data Protection Officer. The court found that the authority's order was unnecessary since the Job Centre had already appointed a new officer. This case shows how compliance orders can be challenged in court.

What happened

The Job Centre of Diepholz challenged an order to re-designate its dismissed Data Protection Officer.

Who was affected

The Job Centre of Diepholz and its former Data Protection Officer.

What the authority found

The court held that the order to re-designate the DPO was not necessary as the Job Centre had appointed a new one.

Why this matters

This case illustrates that organizations can contest compliance orders from authorities. It emphasizes the need for clear procedures when appointing data protection roles.

Recorded legal citations
Automatically processed
Art. 4(2) GDPR
Art. 58(2) GDPR
View original scraped data
Art. 4(2) GDPR
Art. 58(2) GDPR

Original imported citations before automated processing; the processing history does not establish independent verification.

Decision AuthorityVG Köln

Source checks

Linked-source text retrieved.

Automated check recorded — 17 March 2026.

Processing notes: articles corrected, national law identified, authority corrected.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

The Job Centre of Diepholz (controller) dismissed its Data Protection Officer (DPO). The German Federal Data Protection Authority (BfDI - Bundesbeauftragter für den Datenschutz und die Informationsfreiheit) issued an immediately enforceable order against the Job Centre under Article 58(2)(d) GDPR to bring its processing into compliance with the GDPR and re-designate the dismissed DPO. The controller applied for interim relief before the Administrative Court of Köln (VG Köln - Verwaltungsgericht Köln) against this order. The VG Köln held that there was no necessity for the BfDI to make the order immediately enforceable because the controller had already designated a new DPO. Furthermore, the court concluded that Article 58(2)(d) GDPR does not empower the DPA to order the controller to re-designate its dismissed DPO, because neither designating nor dismissing a DPO constitutes processing according to Article 4(2) GDPR

Outcome

Court Ruling

A ruling by a national court on a data-protection matter.

Related Cases (0)

No other cases found for Bundesbeauftragter für den Datenschutz und die Informationsfreiheit (Germany) in DE

This is the only recorded case for this entity in this jurisdiction.

Details

Ruling Date

10 November 2021

Authority

DPA VGKln

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. Bundesbeauftragter für den Datenschutz und die Informationsfreiheit (Germany) - Germany (2021). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: