Privacy Ticker January 2026

The January issue of our Privacy Ticker deals with the changes in  the current case law, regulatory investigations and enforcement actions and opinions.

Topics in this issue are:

Case law

• Federal Court of Justice: Premium History Data in Private Health Insurance only Subject to Information in Case of Personal Reference
• Frankfurt Higher Regional Court: Third-Party Providers are Liable for Cookies without Consent
• Administrative Court of Wiesbaden: Data Protection Authority Must Take Action Against Schufa
• Munich Higher Regional Court: Meta Liable for Damages in Conneciton with Business Tools

Regulatory investigations and enforcement actions

• France: EUR 42 Million Fine Imposed on Mobile Telecommunications Provider for Inadequate Security Measures
• France: Further Fine of EUR 1.7 Million for Inadequate Security Measures
• LDI NRW: EUR 300,000 Fine for Misleading Advertising and Disregard of Data Subject Rights

Opinions

• GDPR Reform Suggestions by the DSK
• Joint Opinion of the EDPB and EDPS on the Digital Omnibus on AI
• BaFin: Guidanec for the Use of AI in Financial Companies

The Privacy Ticker is available under this link or in the download area below.