Changeflow GovPing Data Privacy & Cybersecurity Court Partially Overturns BfDI Ruling on Fan Pages
Priority review Enforcement Amended Final

Court Partially Overturns BfDI Ruling on Fan Pages

Favicon for www.bfdi.bund.de Germany BfDI Press (EN alt)
Filed
Detected
Email

Summary

The 13th Chamber of the Cologne Administrative Court partially upheld an action against the Federal Commissioner for Data Protection and Freedom of Information (BfDI), annulling the BfDI's 2023 decision that had prohibited the operation of the Federal Government's Facebook fan page due to data protection deficiencies. Meta Platforms Ireland Ltd.'s independent lawsuit was dismissed on three of four points. The court relied on the 2018 ECJ Wirtschaftsakademie ruling establishing joint responsibility between Facebook and fan page operators for data protection compliance.

Why this matters

Public authorities in Germany that operate Facebook fan pages should review their cookie consent mechanisms and data processing disclosures in light of this ruling. While the court partially reversed the BfDI, the underlying question of joint controller responsibility under ECJ precedent remains contested—authorities awaiting clarity may face continued litigation risk if their fan pages use tracking cookies without adequate consent.

AI-drafted from the source document, validated against GovPing's analyst note standards . For the primary regulatory language, read the source document .
Published by BfDI on bfdi.bund.de . Detected, standardized, and enriched by GovPing. Review our methodology and editorial standards .

About this source

GovPing monitors Germany BfDI Press (EN alt) for new data privacy & cybersecurity regulatory changes. Every update since tracking began is archived, classified, and available as free RSS or email alerts — 3 changes logged to date.

What changed

The Cologne Administrative Court partially reversed the BfDI's 2023 enforcement decision that had prohibited the operation of the Federal Government's Facebook fan page, finding that the BfDI's ruling did not withstand challenge on all points. The court dismissed Meta's separate action on three of four counts, leaving one count unresolved. Government agencies in Germany that operate social media fan pages should treat this ruling as a significant data protection development—the underlying issue of joint controller responsibility between platforms and page operators under ECJ precedent remains live litigation, with similar proceedings pending in Saxony and other European jurisdictions.

The practical implication is that public authorities operating fan pages now have clearer (though still evolving) guidance on the legal boundaries of social media use. The BfDI has indicated it will carefully examine the judgment's reasoning before deciding whether to refer the matter to the Münster Higher Administrative Court, meaning the legal question may not be finally resolved for some time.

Archived snapshot

Apr 23, 2026

GovPing captured this document from the original source. If the source has since changed or been removed, this is the text as it existed at that time.

Bonn, 22 July 2025

Press release 11/2025

Judgment issued in fan pages case: BfDI considers further legal action

In the consolidated proceedings brought by the Federal Press Office (BPA) and Meta Platforms Ireland Ltd. (Meta) against the Federal Commissioner for Data Protection and Freedom of Information (BfDI), the 13th Chamber of the Cologne Administrative Court held an oral hearing on the question of the legal operation of a Facebook page ("fan page") raised by the Federal Government. Today, the court partially upheld the action and annulled the 2023 decision of the BfDI. Meta's action was dismissed on three of four points.

Source: © Sebra - stock.adobe.com

Prof. Dr. Indra Spiecker, Director of the Institute for Digitalization at the University of Cologne, who represents the BfDI before the court, welcomed the swift decision and the court's intensive examination of the issue during the oral hearing. The BfDI's objective in these proceedings was and remains to ensure that citizens can legally use information from public authorities on social media. Even if the outcome of the proceedings does not meet expectations, we are now one step further.

The BPA had appealed against a decision of the BfDI from February 2023, in which the BfDI had, among other things, prohibited the operation of the Facebook fan page of the Federal Government because of data protection deficiencies. Among other things, the BfDI considered the consent of users to the setting of certain cookies to be problematic. Although the decision was not addressed to Meta, the company also filed an independent lawsuit against it in 2023. The court declared this inadmissible on three of four points.

The proceedings are based, among other things, on a 2018 decision of the European Court of Justice (ECJ, judgment of June 5, 2018, C-210/16 "Wirtschaftsakademie"). The highest court in the European Union ruled that Facebook is not solely responsible for compliance with data protection on its platform, but that the operators of fan pages can also be held liable for data protection deficiencies. This joint responsibility of the platform and site operators has since been consolidated and expanded by numerous other rulings at the European level (e.g., ECJ, judgment of July 10, 2018, C-25/17 "Jehovah's Witnesses" and ECJ, judgment of July 29, 2019, C-40/17 "Fashion ID"). Whether joint responsibility also existed between Meta and the BPA was a matter for the court to clarify.

I will examine the reasoning of the judgment very carefully and decide whether to refer the matter to the next higher instance, the Münster Higher Administrative Court, for a decision. Prof. Dr. Louisa Specht-Riemenschneider, BfDI
The BfDI is aware that many authorities in Germany have been waiting for answers from these court proceedings in order to align their own social media strategies in compliance with the law. Proceedings are still pending in some federal states, for example in Saxony but also in other European countries.

Get daily alerts for Germany BfDI Press (EN alt)

Daily digest delivered to your inbox.

Free. Unsubscribe anytime.

About this page

What is GovPing?

Every important government, regulator, and court update from around the world. One place. Real-time. Free. Our mission

What's from the agency?

Source document text, dates, docket IDs, and authority are extracted directly from BfDI.

What's AI-generated?

The summary, classification, recommended actions, deadlines, and penalty information are AI-generated from the original text and may contain errors. Always verify against the source document.

Last updated

Classification

Agency
BfDI
Filed
July 22nd, 2025
Instrument
Enforcement
Branch
Judicial
Legal weight
Binding
Stage
Final
Change scope
Substantive

Who this affects

Applies to
Government agencies Technology companies
Industry sector
5112 Software & Technology
Activity scope
Social media data processing Cookie consent administration Public authority communications
Geographic scope
Germany DE

Taxonomy

Primary area
Data Privacy
Operational domain
Compliance
Compliance frameworks
GDPR
Topics
Consumer Protection International Trade

Get alerts for this source

We'll email you when Germany BfDI Press (EN alt) publishes new changes.

Free. Unsubscribe anytime.

You're subscribed!