No obligation for platforms to provide information in cases of identity misuse on Instagram – LG Koblenz’s decision highlights legal limits
Using social networks comes with significant opportunities but also risks. Among the most common legal violations are fake user profiles and identity theft. The decision of the Regional Court Koblenz on September 30, 2023 (Case No. 2 O 125/22) highlights the limits of the right to information against platform operators such as Instagram when a user’s identity is abused. The decision, which aligns with current case law and data protection regulations, underscores the existing hurdles for claimants when the perpetrator of identity theft operates anonymously via a digital platform.
Facts and legal background
In the underlying case, an affected person had taken the platform Instagram to disclose personal data of a user account. The reason was that third parties had created a user profile with their personal data, particularly the name and profile picture, without consent. The affected person sought comprehensive information from Meta Platforms Ireland Limited, the operator of Instagram, about the persons behind the fake account to enforce civil claims – such as injunctions or damages. The platform refused to disclose the information, citing data protection and telecommunications regulations.
Requirements for the right to information
The legal examination focused on whether the platform, as a so-called service provider under telemedia law or the General Data Protection Regulation, can be obliged to provide information. In doing so, the court weighed the interest of the injured party in obtaining information against the data protection interest of potential users. In particular, § 21 para. 2 TTDSG (Telecommunications Telemedia Data Protection Act) and the provisions of the TMG (Telemedia Act) generally permit the disclosure of personal data only when there is an explicit legal reservation or court order.
No legal basis for disclosing user data
The Regional Court Koblenz found that Instagram is not obliged to provide information without further ado. While the protection of personality is fundamental, there are significant data protection and telecommunications law hurdles. The conditions for disclosing personal data were not met in this specific case: A legal basis from the GDPR or TMG did not arise, especially as § 21 para. 2 TTDSG generally provides for disclosures only after a court order for the purposes of criminal prosecution, hazard prevention, or the enforcement of copyright claims against unnamed users. For personal rights violations, as in the present case, such disclosure is excluded by the platform due to the lack of corresponding legal basis.
Significance of data protection regulations
Another significant argument for the decision is the protection of data for all Instagram users. Even in cases of unlawful account use, the basic right to informational self-determination of the account owner must be considered. Data protection regulations from the European General Data Protection Regulation (Art. 6, Art. 9 GDPR) as well as the relevant German laws limit the possibilities of disclosing personal data to third parties extrajudicially. The court emphasized that Meta Platforms can only disclose information following a court order or as part of an ongoing investigation.
Implications and practical aspects
The decision confirms the high level of protection for personal data and the restrictive interpretation of the right to information against platform operators. This poses practical difficulties for affected individuals, as extrajudicial pursuit of anonymous identity thieves becomes more challenging. The legal situation also illustrates the necessity to examine both civil and criminal steps in cases of identity rights violations, as accessing data of alleged perpetrators is often only enabled through these means.
Current legal situation – Potential approaches in the legislative process
The case shows that the current law has a gap between protecting victims of identity misuse and the high demands on data protection. Legislative initiatives to improve legal enforcement in cases of personality violations in the digital space are discussed among experts but have not yet been implemented. Thus, the evolution of case law remains of significant importance for victims of internet offenses.
Reference to ongoing developments and presumption of innocence
It should be noted that the decision was made based on the specifically presented facts. Ongoing or future legislative initiatives may lead to a more effective enforcement of information rights in cases of identity theft. Until such an adjustment occurs, the legal situation remains restrictive.
Sources
Regional Court Koblenz, judgment of 09/30/2023, Case No. 2 O 125/22
https://urteile.news/LG-Koblenz_2-O-125_Victims-of-identity-theft-on-Instagram-have-no-information-rights-about-fake-account-against-Instagram~N35436
Should further questions arise regarding data protection and personality rights issues concerning digital platforms, the attorneys of MTR Legal are available for personal consultation to interpret current case law and assess individual situations.
