Court case 6 U 114/23 – Court Ruling (Germany, 2024)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
A German court dismissed a lawsuit against a health insurance company that refused to provide information about clients' premium payments. The court found that the claims were not specific enough and that the right to access personal data did not extend to claims assigned to a third party. This case serves as a reminder for businesses to ensure clarity in data access requests.
What happened
The court ruled that the lawsuit seeking information about insurance premiums was inadmissible due to lack of specificity.
Who was affected
The plaintiff representing clients of the health insurance company who wanted information on their premium payments.
What the authority found
The court decided that the right to access personal data is personal and does not transfer with assigned claims, making the request invalid.
Why this matters
This case highlights the importance of clearly defined data access requests, reminding businesses to ensure they understand the legal framework surrounding personal data rights.
GDPR Articles Cited
View original scraped data
Original data from scraper before AI verification against source document.
National Law Articles
The plaintiff sued a private health insurance company (the controller) by way of an action by stages (Stufenklage) according to [https://www.gesetze-im-internet.de/englisch_zpo/englisch_zpo.html#p0945 § 254 German Civil Process Order (Zivilprozessordnung – ZPO)]. 57 clients of the controller had assigned claims to a third party (the plaintiff). The health insurance company had raised their insurance premiums. On the first stage, the claimant sued for information under Article 15 GDPR to be able to determine the premiums paid by the clients that had assigned their claims. On the second stage, the claimant sought a declaratory judgement that the raises of the insurance premiums by the controller were unlawful and were suing for an amount yet to be determined after having obtained the information from the first stage. The court of first instance, the Regional Court Wuppertal (Landgericht Wuppertal – LG Wuppertal) dismissed the lawsuit. = The court held that an action by stages was inadmissible because the claimant did not want to determine the exact amount of their claims but rather, if they had any claims at all. This made the claims brought forth on the second stage inadmissible because they were not specified enough under [https://www.gesetze-im-internet.de/englisch_zpo/englisch_zpo.html#p0934 § 253(2)(2) ZPO]. The claims for information on the first stage were however admissible. The admissible claims for information were, however, unfounded. This was due to the fact that the criteria of neither Article 15 GDPR nor other, national legal bases for the claims were matched. = The court held that Article 15 GDPR did not give right to information for two reasons: first, the right under Article 15 GDPR to obtain access to personal data is strictly personal and does not follow the assigned claim (as an exception to [https://www.gesetze-im-internet.de/bgb/__401.html § 401 German Civil Code (Bürgerliches Gesetzbuch – BGB)]). The court held that the right under Article 1
Outcome
Court Ruling
A ruling by a national court on a data-protection matter.
Related Cases (0)
No other cases found for Court case 6 U 114/23 in DE
This is the only recorded case for this entity in this jurisdiction.
Details
About this data
Cite as: Cookie Fines. Court case 6 U 114/23 - Germany (2024). Retrieved from cookiefines.eu
Last updated: