Court case 10 C 4.20 – Court Ruling (Germany, 2022)

Court Ruling
DPA VGKln25 February 2022Germany
final
Court Ruling

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

A German court decided that an insolvency administrator cannot access tax information of a debtor due to tax secrecy laws. The court found that GDPR does not apply to legal entities, and national laws can restrict access to such information. This case clarifies the limits of GDPR in accessing information related to legal entities.

What happened

The court ruled that an insolvency administrator could not access a debtor's tax information due to tax secrecy laws.

Who was affected

The insolvency administrator seeking access to tax information of a debtor.

What the authority found

The court concluded that GDPR does not apply to legal entities, and national laws can restrict access to their information.

Why this matters

This ruling clarifies that GDPR protections do not extend to legal entities, and national laws can impose restrictions on accessing such information. Businesses should be aware of these limitations when seeking information under GDPR.

National Law Articles

§ 32c (1) AO
§ 32e AO
Decision AuthorityBVerwG
Reviewed AuthorityVG Köln (Germany)
Full Legal Summary
Detailed

In June 2015, an insolvency administrator requested tax information of an insolvency debtor from a tax office. They did so in order to examine insolvency claims, invoking the Freedom of Information Act of the State of North Rhine-Westphalia. The tax office rejected the application with reference to the obligation of tax secrecy. The insolvency administrator successfully challenged the rejection before the lower administrative courts, which was in turn challenged by the tax office. In the meantime, the General Tax Code (Abgabenordnung - AO) was amended due to the entry into force of the GDPR. In particular, the AO now contains various grounds for exclusion of existing claims for access to information under the Freedom of Information Acts and the GDPR. Due to the questions of EU law raised by the case with regard to Article 23(1)(e) GDPR and Article 23(1)(j) GDPR, the BVerwG had suspended the proceedings and made a reference for a preliminary ruling to the CJEU. The CJEU (Case C-620/19) declared that it had no jurisdiction in view of the fact that the present case concerns legal entities to which the GDPR does not apply. After the proceedings resumed, the tax office claimed that § 32e and § 32c (1) AO would constitute a restriction on the requirement to provide access to information to the insolvency administrator. § 32e AO would amount to a Rechtsgrundverweisung. This means that since the insolvency administrator is not the data subject, the conditions for the right to access under Article 15 GDPR are not met, and § 32c (1) AO would constitute a permissible restriction on the right to information within the scope of the GDPR, as provided for by Article 23 GDPR. The BVerwG held that the insolvency administrator had no right to access of information of data from tax authorities. The court came to the conclusion with a Rechtsfolgenverweisung: § 32e AO extends the restrictions on the right to information provided for in Sections § 32a to § 32d AO under Article 15

Outcome

Court Ruling

A ruling by a national court on a data-protection matter.

Related Cases (0)

No other cases found for Court case 10 C 4.20 in DE

This is the only recorded case for this entity in this jurisdiction.

Details

Ruling Date

25 February 2022

Authority

DPA VGKln

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Court case 10 C 4.20 - Germany (2022). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: