Court case 10 C 4.20 – Court Ruling (Germany, 2022)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
A German court decided that an insolvency administrator cannot access tax information of a debtor due to tax secrecy laws. The court found that GDPR does not apply to legal entities, and national laws can restrict access to such information. This case clarifies the limits of GDPR in accessing information related to legal entities.
What happened
The court ruled that an insolvency administrator could not access a debtor's tax information due to tax secrecy laws.
Who was affected
The insolvency administrator seeking access to tax information of a debtor.
What the authority found
The court concluded that GDPR does not apply to legal entities, and national laws can restrict access to their information.
Why this matters
This ruling clarifies that GDPR protections do not extend to legal entities, and national laws can impose restrictions on accessing such information. Businesses should be aware of these limitations when seeking information under GDPR.
GDPR Articles Cited
National Law Articles
In June 2015, an insolvency administrator requested tax information of an insolvency debtor from a tax office. They did so in order to examine insolvency claims, invoking the Freedom of Information Act of the State of North Rhine-Westphalia. The tax office rejected the application with reference to the obligation of tax secrecy. The insolvency administrator successfully challenged the rejection before the lower administrative courts, which was in turn challenged by the tax office. In the meantime, the General Tax Code (Abgabenordnung - AO) was amended due to the entry into force of the GDPR. In particular, the AO now contains various grounds for exclusion of existing claims for access to information under the Freedom of Information Acts and the GDPR. Due to the questions of EU law raised by the case with regard to Article 23(1)(e) GDPR and Article 23(1)(j) GDPR, the BVerwG had suspended the proceedings and made a reference for a preliminary ruling to the CJEU. The CJEU (Case C-620/19) declared that it had no jurisdiction in view of the fact that the present case concerns legal entities to which the GDPR does not apply. After the proceedings resumed, the tax office claimed that § 32e and § 32c (1) AO would constitute a restriction on the requirement to provide access to information to the insolvency administrator. § 32e AO would amount to a Rechtsgrundverweisung. This means that since the insolvency administrator is not the data subject, the conditions for the right to access under Article 15 GDPR are not met, and § 32c (1) AO would constitute a permissible restriction on the right to information within the scope of the GDPR, as provided for by Article 23 GDPR. The BVerwG held that the insolvency administrator had no right to access of information of data from tax authorities. The court came to the conclusion with a Rechtsfolgenverweisung: § 32e AO extends the restrictions on the right to information provided for in Sections § 32a to § 32d AO under Article 15
Outcome
Court Ruling
A ruling by a national court on a data-protection matter.
Related Cases (0)
No other cases found for Court case 10 C 4.20 in DE
This is the only recorded case for this entity in this jurisdiction.
Details
About this data
Cite as: Cookie Fines. Court case 10 C 4.20 - Germany (2022). Retrieved from cookiefines.eu
Last updated: