”
Facts of the case and starting point of the decision
\n\n
In everyday life, private individuals occasionally notice alleged administrative offences and document them with photos in order to forward them to authorities. In the case addressed by the Higher Regional Court (OLG) of Dresden, such a photo was at the centre: a private individual took a picture of a vehicle to substantiate a suspected parking or traffic-regulation offence. The image showed personal data, in particular the licence plate, thereby making a link to a specific vehicle owner possible.
\n
Legal standard of review: personal reference and data protection law
\n
Personal data via vehicle licence plates
\n\n
The court had to address whether and under what conditions the taking and use of such photos can be permissible under data protection law. Vehicle licence plates enable—at least indirectly via official enquiries—the identification of a person. Accordingly, such recordings can have a personal reference within the meaning of data protection law.
\n
Requirement of a legal basis for processing
\n\n
Creating a photo that contains personal data constitutes processing that requires a sound legal basis. The decisive factor is whether the processing can be based on a statutory authorisation or whether the protected interests of the data subject prevail.
\n
Balancing of interests: limits of private “order controls”
\n
Reporting to authorities as a purpose is not automatically sufficient
\n\n
The OLG Dresden made clear that referring to an intended complaint or report to an authority does not, by itself, automatically legitimise any collection of data by private individuals. Even if there may be a public interest in prosecuting administrative offences, this does not mean that private persons may collect and pass on personal data at will.
\n
Protection of the data subject and intensity of the interference
\n\n
In the balancing, it is particularly important how far-reaching the interference is and which data are collected in what form. The targeted taking of photos that allow an attribution to a person can interfere with the right to informational self-determination. The OLG Dresden limited the possibilities for private individuals to act as “guardians of order” through their own data collection and tied permissibility to strict requirements.
\n
Consequences: risk of civil-law claims
\n
Claims for injunctive relief and removal
\n\n
The data-protection-law assessment may lead to affected persons being able to assert civil-law claims, in particular for injunctive relief and, if applicable, removal. The proceedings illustrate that documenting and forwarding such recordings can have financial and legal consequences for the person who creates them.
\n
Classification of the procedural posture and restraint in assessments
\n\n
The decision concerns the legal classification of a specific data-collection situation. Applying it to other constellations always depends on the circumstances of the individual case, in particular on the content of the recording, the context and the purpose of the processing. Insofar as proceedings have not yet been conclusively clarified in terms of facts, the presumption of innocence applies; decisive are the findings on which the decision is based (source: Juraforum, article “Teurer Schnappschuss: OLG Dresden setzt Hobby-Ordnungshütern enge Grenzen”, available at the URL provided by the client).
\n
Significance for data protection issues in everyday life and in the corporate environment
\n\n
Data-protection-law requirements arise not only in classic corporate processes, but also in everyday documentation by means of image and video recordings. In practice, the question of whether a recording establishes a personal reference and whether there is a sound legal basis can play a significant role—for example in reporting situations, internal investigative measures or disclosure to third parties.
\n\n
Anyone who, in this context, needs clarification regarding data-protection-law frameworks and permissible processing can find further information on legal advice on data protection from MTR Legal Rechtsanwälte.
“
