Enforcing jurisdiction
Germany · Geography does not establish applicable law.
Confirmed applicable legislation
Privacy topics

Hamburgische Krebsregister (Hamburg Cancer Registry) – Court Ruling (Germany, 2022)

Court Ruling
DPA VGHamburg28 July 2022Germany
final
Court Ruling

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

The Hamburg Cancer Registry was involved in a legal dispute over data processing related to cancer patients. A patient requested access to her data, which was properly handled according to the law. This case emphasizes the importance of transparency and patient rights in health data management.

What happened

A patient requested access to her personal data held by the Hamburg Cancer Registry.

Who was affected

A cancer patient diagnosed in 2019 who sought information about her data.

What the authority found

The court confirmed that the patient received a complete overview of her stored data, complying with legal requirements.

Why this matters

This case reinforces the need for health organizations to respect patient rights regarding data access. It sets a precedent for how health data should be managed and shared.

Recorded legal citations
Automatically processed
Art. 15 GDPR
Art. 4(1) GDPR
Art. 9(1) GDPR
Art. 9(2) GDPR
Art. 9(2)(g) GDPR
Art. 9(2)(h) GDPR
Art. 9(2)(i) GDPR
Art. 9(2)(j) GDPR
Art. 15(1)(c) GDPR
Art. 15(3) GDPR
Art. 17(1) GDPR
Art. 17(1)(d) GDPR
View original scraped data
Art. 4(1) GDPR
Art. 9(1) GDPR
Art. 9(2)(g) GDPR
Art. 9(2)(h) GDPR
Art. 9(2)(i) GDPR
Art. 9(2)(j) GDPR
Art. 9(2) GDPR
Art. 15(GDPR)
Art. 15(1)(c) GDPR
Art. 15(3) GDPR
Art. 17(1) GDPR
Art. 17(1)(d) GDPR

Original imported citations before automated processing; the processing history does not establish independent verification.

National Law Articles
AI-identified
12(3) HmbKrebsRG
Section 2 (1) No. 4 HmbKrebsRG
Section 2 HmbKrebsRG
Section 2(3) HmbKrebsRG
Section 3(1) HmbKrebsRG
Decision AuthorityVG Hamburg

Source checks

Linked-source text retrieved.

Automated check recorded — 21 March 2026.

Processing notes: national law identified.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

The parties are in dispute about Hamburg Cancer Registry data processing and data transfers procedures. The data subject was diagnosed with breast cancer in 2019 and is a resident of the federal city-state of Hamburg. Treating physicians are legally obliged to transfer personal data of their cancer patients to the Cancer Registry. The Hamburg Cancer Registry (HKR) is an independent department of the regional Authority for Science, Research, Equality and Districts. Task of the registry is to identify cancers to be recorded in relation to the population, i.e. occurrence and frequency of diseases and their distribution according to age, sex and place of residence. Transferred data contains name, health insurance number, residence, data of birth, sex, sometimes personal habits (e.g. smoker) and health related data like diagnose, start, length and result of treatment. The data is processed in a confidential (physical) area within the HKR. Moreover, to pseudonymise the data, a set of hash-based control numbers will be automatically generated for every data set. Only the employees of the confidential area have access to the unencrypted personal data. Health related data sets will be shared with other cancer registers and cancer combating organizations on the federal level. The regional law applied here is the Hamburg Cancer Registry Act (HmbKrebsRG). The concerned data subject received a data protection declaration of consent and privacy information with her treatment contract from the hospital. The data subject gave consent to all data transfers at the end of April 2019. In March 2020, the data subject received a request from the University of Lübeck to take part in a cancer-study. According to the letter, contact was made, because the data subject was registered in the HKR. Subsequently, the data subject submitted a right to access request to the HKR. According to the HKR, the data subject received a complete overview of the stored data. This overview contained a

Outcome

Court Ruling

A ruling by a national court on a data-protection matter.

Related Cases (0)

No other cases found for Hamburgische Krebsregister (Hamburg Cancer Registry) in DE

This is the only recorded case for this entity in this jurisdiction.

Details

Ruling Date

28 July 2022

Authority

DPA VGHamburg

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. Hamburgische Krebsregister (Hamburg Cancer Registry) - Germany (2022). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: