- Enforcing jurisdiction
- Germany · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Court case 12 W 23/22 – Court Ruling (Germany, 2022)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
A court ruled on a case where a patient requested access to her medical records but received incomplete information. The court decided that the hospital partially fulfilled its obligation to provide access to her data. This ruling clarifies the extent of a patient's right to access their medical information.
What happened
The court addressed a patient's request for access to her medical treatment data and found the hospital only partially complied.
Who was affected
A patient who sought access to her medical treatment records from a hospital.
What the authority found
The court confirmed that the hospital partially met its obligations under GDPR, as most requested data was provided in paper form.
Why this matters
This ruling reinforces patients' rights to access their medical data. Healthcare providers must ensure they fully comply with access requests to avoid disputes.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 17 March 2026.
Processing notes: authority corrected.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The data subject made a request upon Article 15 (3) GDPR to get access to her treatment Data from the time from 14th December 2020 to 19th February 2021. He has already received a Paper File in which X-Ray, MRI, and CT reports were missing. The data controller, a hospital where the data subject has received her treatment, has claimed, that she has received the X-Ray, MRI and CT reports on a Compact Disc (CD) in a PDF Format File, along with all the other documentation. The data controller has claimed €6,000 as the dispute value for the violation of Article 15(3) GDPR. The Regional Court in Cottbus has set in his decision the value on €1,000. The Higher Regional Court of Brandenburg confirmed the decision of the Regional Court in Cottbus. The court held that the data controller has partially fulfilled his obligation to provide the access to the data subjects’ own data since the majority of the Data requested was already provided in paper form, from which she could already get an insight into her treatment at the data controller’s institution. Due to this, the court held, that the value of the dispute could not be valued as high as it was claimed by the data subject. The court has dismissed the appeal and upheld the first-instance judgement.
Outcome
Court Ruling
A ruling by a national court on a data-protection matter.
Related Cases (0)
No other cases found for Court case 12 W 23/22 in DE
This is the only recorded case for this entity in this jurisdiction.
Details
About this data
Cite as: Cookie Fines. Court case 12 W 23/22 - Germany (2022). Retrieved from cookiefines.eu
Last updated: