Enforcing jurisdiction
Germany · Geography does not establish applicable law.
Confirmed applicable legislation

Person pretending to be the data subject – Court Ruling (Germany, 2024)

Court Ruling
DPA VGDsseldorf25 March 2024Germany
final
Court Ruling

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

A court ruled against a person who pretended to be a data subject in a complaint about not receiving information from a data controller. The court found that the individual did not prove their identity, which is necessary to pursue such claims. This case highlights the importance of verifying identity in data protection matters.

What happened

A person pretending to be the data subject failed to prove their identity in a complaint against a data controller.

Who was affected

The individual claiming to be the data subject was affected by the court's ruling.

What the authority found

The court decided that the person did not demonstrate they were the actual data subject, which invalidated their complaint.

Why this matters

This ruling underscores the necessity of verifying identity in data protection cases. It serves as a reminder for individuals to ensure they have proper identification when pursuing claims.

Recorded legal citations
Automatically processed
Art. 13 GDPR
Art. 14 GDPR
View original scraped data
Art. 13(GDPR)
Art. 14(GDPR)

Original imported citations before automated processing; the processing history does not establish independent verification.

Decision AuthorityVG Düsseldorf

Source checks

Linked-source text retrieved.

Automated check recorded — 23 March 2026.

Processing notes: authority corrected.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

On 2 May 2023, a person identifying themself under the name of the data subject lodged a complaint with the DPA against a controller, a court. This complaint alleged that the controller had not provided information as required by Article 13 and Article 14 GDPR. On 24 January 2024, the data subject filed an inactivity suit against the DPA on the same matter, requesting access to the administrative file. In a procedural order on 25 January 2024, the court requested the alleged data subject to provide proof of their identity within two weeks as there were doubts about whether the person acting in the case was in fact the data subject. On 6 February 2024, a submission arrived under the data subject’s name with a declaration of personal and economic circumstances and other documents, noting the data subject was unable to attend due to illness. A follow-up order on 9 February 2024 reminded the data subject of the identity requirement and sought justification for why access to the file should be transmitted in print or electronic form. No further response was received and no evidence of identity was provided. First, the court found that the person acting as the data subject had not demonstrated that they were the person affected by the underlying complaint procedure towards the supervisory authority. The court noted numerous indicators suggesting that the person acting in the procedure might not be the data subject, including failure to respond to repeated requests to prove identity, absence from the hearing, failure to provide requested medical evidence and personal/economic declarations. The court also referenced similar earlier cases by the same person (like 29 K 8881/22) where identity doubts had arisen. Because the person continued to press cases without establishing identity, the court stated it would in future simply file such claims rather than decide them. As a result, the objective and subjective elements of a legal interest in pursuing the alleged claim coul

Outcome

Court Ruling

A ruling by a national court on a data-protection matter.

Related Cases (0)

No other cases found for Person pretending to be the data subject in DE

This is the only recorded case for this entity in this jurisdiction.

Details

Ruling Date

25 March 2024

Authority

DPA VGDsseldorf

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. Person pretending to be the data subject - Germany (2024). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: