Germany
Rigorous by design — Germany's Datenschutz tradition shapes EU enforcement across the board
Bundesbeauftragte für den Datenschutz und die Informationsfreiheit + 16 State DPAs·BfDI / LDAs
Enforcement profile
Germany's decentralised structure means enforcement varies significantly by state. The Hamburg DPA (HmbBfDI) handles big tech companies headquartered there; Bavarian and BW authorities focus on industrial sector. All 17 authorities cooperate through the DSK conference. Employee data protection is a particularly strong focus.
Notable enforcement decisions
Unlawful surveillance of employee private lives including health and personal circumstances.
Insufficient authentication measures allowing unauthorised access to customer accounts.
Unlawful retention of tenant personal data without legitimate purpose.
Active regulations
The 18th-century neoclassical triumphal arch in central Berlin — a symbol of reunification and German democratic values.
Enforcement data is based on publicly available decisions and may not reflect every action, appeal, reduction, or subsequent court ruling. Fine amounts are shown as reported at the time of the decision. This information is for intelligence purposes and does not constitute legal advice.