- Enforcing jurisdiction
- Germany · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Court case IV ZR 204/23 – Court Ruling (Germany, 2025)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
A German court dismissed a health insurance policyholder's request for information about premium adjustments. The court ruled that the requested documents did not qualify as personal data under GDPR. This case clarifies the limits of data access rights in insurance contracts.
What happened
The court ruled that the insurance policyholder's request for copies of premium adjustment documents was not justified under GDPR.
Who was affected
The health insurance policyholder who sought information about premium increases from their insurer.
What the authority found
The court held that the requested documents did not constitute personal data, thus denying the access request.
Why this matters
This case highlights the boundaries of data access rights in the insurance sector. Companies should understand what qualifies as personal data to comply with access requests.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 18 March 2026.
Processing notes: authority corrected.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The parties are disputing the validity of insurance premium increases in a private health insurance policy. The data subject holds a health insurance policy with the controller, who made premium adjustments. To the extent still relevant for the appeal, the data subject requested information regarding all premium adjustments made by the controller to the insurance contract between 2014 and 2019. The Regional Court dismissed the action. The Higher Regional Court, dismissing the data subject's further appeal, ordered the controller to provide access by partial judgment. The appeal court held that the access request is justified both with regard to the requested information and the related documents in the form of insurance policies and corresponding supplements; the basis for the claim is Article 15(1) GDPR in conjunction with Article 15(3) GDPR. With the appeal the controller continues to pursue its motion to dismiss the action. The court held, that a right to copies of the information submitted for the purpose of premium adjustment in the form of insurance policies and supplements to the insurance policy, does not follow from Article 15(1) and (3) GDPR. The court confirmed it's conclusion of BGH - IV ZR 177/22, that the supplements to the insurance policy, as a whole, do not constitute personal data of the policyholder. The court had previously held, that while letters from the data subject to the controller are to be classified as personal data in their entirety, since the personal information already consists of the fact that the data subject has made a statement in accordance with the letter, conversely - as is relevant here - letters from the controller to the data subject are personal data only insofar as they contain information about the data subject. Accordingly, only the personal data of an insurance policy is not categorically excluded from the scope of application of Article 15(1) GDPR. However, as the data subject did not limit his asserted claim and
Outcome
Court Ruling
A ruling by a national court on a data-protection matter.
Related Cases (0)
No other cases found for Court case IV ZR 204/23 in DE
This is the only recorded case for this entity in this jurisdiction.
Details
Ruling Date
19 March 2025
Authority
DPA OLGKoblenz
About this data
Cite as: Cookie Fines. Court case IV ZR 204/23 - Germany (2025). Retrieved from cookiefines.eu
Last updated: