Court case 29 K 6375/25 – Court Ruling (Germany, 2025)

On 16 May 2025, the data subject made an access request to the controller by letter. On 20 May 2025, the controller informed him that his letter had been received and that his request was being examined, but clarification could take time. On 23 June 2025, the data subject brought a case before the court of first instance (Administrative Court Düsseldorf -VG Düsseldorf), claiming that the controller failed to satisfy his request. The court pointed out that the one month deadline in Article 12(3) GDPR only refers to the provision of the status report on the measures taken pursuant to the request. According to the court, it does not set a deadline for the fulfillment of the rights or claims of the data subject enshrined in Articles 15-22 GDPR. In this case the controller provided the data subject with a status report in due time. Therefore, it complied with its obligation to inform the data subject of the measures taken to satisfy his request for information within the one-month period pursuant to Article 12(3) GDPR. The court found the action inadmissible.