Enforcing jurisdiction
Germany · Geography does not establish applicable law.
Confirmed applicable legislation
Privacy topics

Court case I ZR 186/17 – Court Ruling (Germany, 2025)

Court Ruling
Court of Justice of the European Union27 March 2025Germany
final
Court Ruling

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

Germany's Federal Court of Justice ruled that a consumer association can take legal action against Meta for not providing proper information to users about their data rights. This decision clarifies that organizations can represent users in cases where companies fail to meet their information obligations. It emphasizes the importance of transparency in data processing.

What happened

The Federal Court of Justice confirmed that a consumer association can sue Meta for not fulfilling its information obligations under GDPR.

Who was affected

Users of Meta's app centre who were not adequately informed about their data rights.

What the authority found

The Court of Justice ruled that violations of information obligations can be subject to representative actions under GDPR.

Why this matters

This ruling allows consumer organizations to hold companies accountable for data protection violations, encouraging better compliance. Website operators should ensure they provide clear information to users about their data rights.

Recorded legal citations
Automatically processed
Art. 12(1) GDPR
Art. 80(2) GDPR
View original scraped data
Art. 12(1) GDPR
Art. 80(2) GDPR

Original imported citations before automated processing; the processing history does not establish independent verification.

Decision AuthorityBGH
Reviewed AuthorityCJEU

Source checks

Linked-source text retrieved.

Review needed — 20 March 2026.

Processing notes: articles corrected, national law identified, authority corrected, date discrepancy.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

The Federal Union of Consumer Organisations and Associations (Bundesverband der Verbraucherzentralen und Verbraucherverbände – Verbraucherzentrale Bundesverband eV), a German consumer association, brought an action before the Regional Court of Berlin (Landesgericht Berlin – LG Berlin), claiming that Meta Platforms Ireland Ltd (the controller) failed to comply with the legal requirements to obtain valid consent from the users of its app centre under the GDPR because the controller had not fulfilled its information obligations. The action was brought independently of a specific infringement of a data subject’s GDPR rights and without a mandate from a specific data subject. The LG Berlin upheld the action; the controller appealed this decision before the Higher Regional Court of Berlin (Kammergericht Berlin – KG Berlin). This appeal was dismissed and the controller further appealed the judgement of KG Berlin before the Federal Court of Justice (Bundesgerichtshof – BGH). The BGH had doubts as to the admissibility of the action brought by the Federal Union. Therefore, it referred a question to the CJEU for a preliminary ruling on the interpretation of Article 80(1), 80(2) and 84(1) GDPR. The CJEU ruled on 11 July 2024 in C‑757/22, Meta Platforms Ireland (Representative action) that a violation of the controller’s information obligation can be subject to a representative action under Article 80(2) GDPR. The BGH ruled - implementing the CJEU's decision -, that qualified entities are authorized, pursuant to the [https://www.gesetze-im-internet.de/englisch_uwg/englisch_uwg.html German Unfair Competition Act (Gesetz gegen den unlauteren Wettbewerb - UWG)] and the [https://www.gesetze-im-internet.de/uklag/ German Injunctive Relief Act (Unterlassungsklagegesetz - UKlaG]), to bring legal action before the civil courts for violations of information obligations pursuant to Article 12(1) GDPR in conjunction with Article 13(1)(c) and (e) GDPR, regardless of the specific violation

Outcome

Court Ruling

A ruling by a national court on a data-protection matter.

Related Cases (0)

No other cases found for Court case I ZR 186/17 in DE

This is the only recorded case for this entity in this jurisdiction.

Details

Ruling Date

27 March 2025

Authority

Court of Justice of the European Union

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. Court case I ZR 186/17 - Germany (2025). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: