Court case IV ZR 204/23 – Court Ruling (Germany, 2025)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
A German court ruled on a case involving health insurance premium increases. The court decided that the insurance company must provide some information about past premium adjustments, but not everything requested. This is important because it clarifies what information a person can access regarding their insurance.
What happened
The court ordered the insurance company to provide access to some information about premium adjustments.
Who was affected
A person holding a private health insurance policy who requested information about premium adjustments.
What the authority found
The court held that the person was entitled to some information but not all requested documents, clarifying the limits of access under GDPR.
Why this matters
This case highlights the balance between a person's right to access information and the limits of what constitutes personal data. It shows that not all documents related to a policy are accessible.
GDPR Articles Cited
View original scraped data
Original data from scraper before AI verification against source document.
The parties are disputing the validity of insurance premium increases in a private health insurance policy. The data subject holds a health insurance policy with the controller, who made premium adjustments. To the extent still relevant for the appeal, the data subject requested information regarding all premium adjustments made by the controller to the insurance contract between 2014 and 2019. The Regional Court dismissed the action. The Higher Regional Court, dismissing the data subject's further appeal, ordered the controller to provide access by partial judgment. The appeal court held that the access request is justified both with regard to the requested information and the related documents in the form of insurance policies and corresponding supplements; the basis for the claim is Article 15(1) GDPR in conjunction with Article 15(3) GDPR. With the appeal the controller continues to pursue its motion to dismiss the action. The court held, that a right to copies of the information submitted for the purpose of premium adjustment in the form of insurance policies and supplements to the insurance policy, does not follow from Article 15(1) and (3) GDPR. The court confirmed it's conclusion of BGH - IV ZR 177/22, that the supplements to the insurance policy, as a whole, do not constitute personal data of the policyholder. The court had previously held, that while letters from the data subject to the controller are to be classified as personal data in their entirety, since the personal information already consists of the fact that the data subject has made a statement in accordance with the letter, conversely - as is relevant here - letters from the controller to the data subject are personal data only insofar as they contain information about the data subject. Accordingly, only the personal data of an insurance policy is not categorically excluded from the scope of application of Article 15(1) GDPR. However, as the data subject did not limit his asserted claim and
Outcome
Court Ruling
A ruling by a national court on a data-protection matter.
Related Cases (0)
No other cases found for Court case IV ZR 204/23 in DE
This is the only recorded case for this entity in this jurisdiction.
Details
About this data
Cite as: Cookie Fines. Court case IV ZR 204/23 - Germany (2025). Retrieved from cookiefines.eu
Last updated: