Court case 10 U 1633/22 – Court Ruling (Germany, 2023)

Court Ruling
DPA OLGKoblenz20 July 2023Germany
final
Court Ruling

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

A court ruled that an insurance company must provide a customer with access to their personal data after a dispute over a premium increase. The court emphasized that the customer has the right to know how their data is used, which is crucial for transparency. This decision reinforces the importance of individuals being able to access their personal information.

What happened

The court ordered an insurance company to provide a customer access to their personal data after a premium dispute.

Who was affected

The customer who requested access to their personal data from the insurance company.

What the authority found

The Higher Regional Court of Koblenz ruled that the customer has a right to access their personal data under GDPR.

Why this matters

This case sets a precedent for the right to access personal data, reminding companies that they must comply with access requests. It encourages individuals to exercise their rights regarding personal information.

GDPR Articles Cited

Art. 12(5) GDPR
Art. 15(3) GDPR
Decision AuthorityOLG Koblenz
Full Legal Summary
Detailed

The data subject and the controller were bound by an insurance contract. The controller increased the premium and the data subject claimed that such an increase was unlawful. Therefore, the data subject made an access request, to which the controller refused to reply. The data subject challenged the lawfulness of the premium increase in court and contextually asked the judge to order the controller to provide access to the requested information. The court of first instance dismissed the data subject’s access claim, stating that the latter was merely instrumental to prove the unlawfulness of the premium increase, without any autonomous data protection purpose. The data subject appealed the decision. The Higher Regional Court of Koblenz (Oberlandesgericht Koblenz – OLG Koblenz) overturned the first instance judgement. First, the court stressed how information concerning premium increases in an insurance agreement, like in general all contract details related to an individual, are personal data within the meaning of Article 4(1) GDPR. Second, the court referred to the CJEU judgement in case C-487/21 to clarify the scope of the data subject’s right to a copy of their personal data pursuant to Article 15(3) GDPR. The data subject had a right to a faithful and understandable reproduction of all their personal data processed by the controller. The court also pointed out how the right to a copy shall enable the data subject to enforce further data protection rights, such as right to erasure, rectification or objection. Finally, the court stated that the controller could not rely on Article 12(5) GDPR to avoid to reply to the access request. As a matter of fact, that is possible only insofar as a request is manifestly unfounded or excessive. It was uncontested by the controller that personal data were processed, therefore the request was not manifestly unfounded. Regarding the “excessiveness” of the access request, the court of first instance held that it did not dire

Outcome

Court Ruling

A ruling by a national court on a data-protection matter.

Related Cases (0)

No other cases found for Court case 10 U 1633/22 in DE

This is the only recorded case for this entity in this jurisdiction.

Details

Ruling Date

20 July 2023

Authority

DPA OLGKoblenz

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Court case 10 U 1633/22 - Germany (2023). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: