Court case 29 K 6375/25 – Court Ruling (Germany, 2025)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
A court ruled that a company properly responded to a request for information about personal data, even though the request took longer than expected. This is significant because it clarifies how companies should handle such requests and the timelines involved.
What happened
A data subject claimed that a company did not fulfill his request for information within the required timeframe.
Who was affected
A person who requested access to their personal data held by the company.
What the authority found
The court decided that the company met its obligation by providing a status report within the one-month period, even if the full request took longer.
Why this matters
This ruling clarifies the expectations for companies when responding to data access requests, reinforcing the importance of timely communication.
GDPR Articles Cited
View original scraped data
Original data from scraper before AI verification against source document.
On 16 May 2025, the data subject made an access request to the controller by letter. On 20 May 2025, the controller informed him that his letter had been received and that his request was being examined, but clarification could take time. On 23 June 2025, the data subject brought a case before the court of first instance (Administrative Court Düsseldorf -VG Düsseldorf), claiming that the controller failed to satisfy his request. The court pointed out that the one month deadline in Article 12(3) GDPR only refers to the provision of the status report on the measures taken pursuant to the request. According to the court, it does not set a deadline for the fulfillment of the rights or claims of the data subject enshrined in Articles 15-22 GDPR. In this case the controller provided the data subject with a status report in due time. Therefore, it complied with its obligation to inform the data subject of the measures taken to satisfy his request for information within the one-month period pursuant to Article 12(3) GDPR. The court found the action inadmissible.
Outcome
Court Ruling
A ruling by a national court on a data-protection matter.
Related Cases (0)
No other cases found for Court case 29 K 6375/25 in DE
This is the only recorded case for this entity in this jurisdiction.
Details
Ruling Date
5 September 2025
Authority
DPA VGDsseldorf
About this data
Cite as: Cookie Fines. Court case 29 K 6375/25 - Germany (2025). Retrieved from cookiefines.eu
Last updated: