Court case 5 O 1954/21 – Court Ruling (Germany, 2022)

Court Ruling
DPA LGKassel5 July 2022Germany
final
Court Ruling

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

The Regional Court Kassel decided that a person's health insurance premium amounts are not personal data under GDPR. This means the insurance company didn't have to provide details about premium changes to the policyholder. This ruling clarifies what counts as personal data, which is important for businesses handling customer information.

What happened

The court ruled that health insurance premium amounts are not personal data under GDPR.

Who was affected

The policyholder who requested information on premium adjustments from their insurance company.

What the authority found

The court decided that the premium amounts do not qualify as personal data, so the insurance company was not required to provide access under Article 15 GDPR.

Why this matters

This case highlights that not all information related to a person is considered personal data under GDPR. Businesses should carefully assess what data they must disclose when customers request access.

GDPR Articles Cited

Art. 15 GDPR
Decision AuthorityLG Kassel
Full Legal Summary
Detailed

An insurance policy holder (the claimant) had a private health insurance with an insurer (the defendant). After the defendant made certain premium adjustments within the framework of the existing health insurance contract, the claimant initially unsuccessfully requested information on premium adjustments from the defendant. The claimant then asserted that he had the right of access to information from the defendant under Article 15 GDPR concerning the years 2018, 2019, and 2020 to the effect that the defendant had to inform him of the amount of the respective premium adjustments and the information transmitted for this purpose in the form of insurance certificates. The Regional Court Kassel (LG Kassel) first considered if the amount of a health insurance premiums constituted personal data. It held that it could not be regarded as personal data as it does not reflect the individualized insurance protection of the insured persons, taking into account their health conditions. It merely provides information on the price of the insurance cover for a particular person as laid down in the insurance contract. Even though there are individual tariffs for the premium amounts, it does not enable the identification of an individual. Therefore, the amount a person spends on their health insurance cannot be regarded as personal data. Consequently, the claimant had no right to access under Article 15 GDPR. Second, the Court considered whether the claimant could have invoked their Article 15 GDPR rights if the data in question had been personal data. It held that, in light of Recital 63 GDPR, the intent and purpose of the right of access is to make the data subject aware of the processing of personal data and enable them to verify the lawfulness of data processing. The claimant, however, invoked Article 15 GDPR exclusively to examine and check the premium adjustments made by the defendant for possible mistakes which the protective purpose of the GDPR does not cover. Consequently

Outcome

Court Ruling

A ruling by a national court on a data-protection matter.

Related Cases (0)

No other cases found for Court case 5 O 1954/21 in DE

This is the only recorded case for this entity in this jurisdiction.

Details

Ruling Date

5 July 2022

Authority

DPA LGKassel

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Court case 5 O 1954/21 - Germany (2022). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: