Court case 28 O 168/22 – Court Ruling (Germany, 2022)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
A German court ordered a search engine to remove certain search results that included personal details and images of a person claiming to be a victim of domestic violence. The court found that the individual's privacy rights outweighed the search engine's business interests and freedom of expression.
What happened
The court ordered a search engine to delete search results containing personal information and images of a domestic violence victim.
Who was affected
An individual whose personal details and images were included in search results without consent.
What the authority found
The Regional Court of Cologne ruled that the search engine must delete the personal data as it violated the individual's privacy rights under GDPR.
Why this matters
This ruling highlights the balance between privacy rights and freedom of expression. It signals to search engines and online platforms the importance of respecting individuals' privacy, especially in sensitive cases involving personal harm.
GDPR Articles Cited
The controller is an operator of a search engine. If a user used specific keywords in a name-based search, the search engine showed search results that contained the following wording: "T ENTREPRENEUR, CMO AND VICTIM OF DOMESTIC VIOLENCE BY I, BOYFRIEND AND INVESTOR IN HER COMPANY I come from a privileged background, a loving family, I have a higher college degree, I’ve been an entrepreneur for as long as I can remember, I’m a CMO, I speak 5 languages fluently… and I was in an abusive relationship with a venture capitalist. The emotional abuse escalated into physical abuse and on the 23rd of April 2021 I ended up in hospital and he was incarcerated.” Images of the data subject were also included. The data subject requested an interim injunction stopping the search engine from listing search results containing the quote and his images. The Regional Court of Cologne (LG Köln) held that the application for an interim injunction is admissible and well-founded. The proceedings were brought against the controller on the basis of Article 79(2) GDPR. On the merits, the court ruled that the operator of a search engine is considered to be the controller within the meaning of Article 4(7) GDPR and that the controller is requested to delete the data subject’s personal data as the requirements of Article 17(1)(c) GDPR and Article 17(1)(d) GDPR are met. The processing of the data subject’s personal data in this case is not necessary for exercising the right of freedom of expression and information under Article 17(3)(a) GDPR. In particular, the rights of the data subject under Articles 7 and 8 of the Charter of Fundamental Rights of the EU (CFR) were in this case held to outweigh the freedom of the controller to conduct a business under Article 16 CFR and the freedom of expression and information under Article 11 CFR. In conducting the balancing exercise, it was decisive for the court that the data subject made it credible that the cited statements were untrue or opinions with
Outcome
Court Ruling
A ruling by a national court on a data-protection matter.
Related Cases (0)
No other cases found for Court case 28 O 168/22 in DE
This is the only recorded case for this entity in this jurisdiction.
Details
About this data
Cite as: Cookie Fines. Court case 28 O 168/22 - Germany (2022). Retrieved from cookiefines.eu
Last updated: