Germany Hamburg HmbBfDI

Hamburg Transparency Report 2024/2025: Freedom of Information on Track

The Hamburg Data Protection and Freedom of Information Commissioner (HmbBfDI) published its 2024/2025 Transparency Report, renamed from the previous Tätigkeitsbericht Informationsfreiheit to reflect expanded duties under the new Lobbyregistergesetz. The report highlights increased public interest in government transparency while noting persistent issues including categorical denial of straightforward information requests and failure to document digital communications of decision-makers. A virtual Datenschutzsprechstunde on February 4, 2026 from 12:00–13:00 will discuss the report findings with Commissioner Thomas Fuchs.

Hamburg DPA Annual Report 2025: 4,200+ Submissions, €492k Fine, AI Dominates

The Hamburg Data Protection Authority (HmbBfDI) has released its 34th Annual Data Protection Activity Report covering 2025. The report documents over 4,200 submissions—a 60 percent increase year-over-year—with this trend continuing at plus 10 percent through February 2026. The authority imposed a fine of €492,000 on a financial services company for rejecting credit card applications via automated decisions and subsequently failing to fulfill its legally required information and disclosure obligations when affected individuals requested access. AI-related issues feature prominently: complaints about social networks have nearly tripled, and HmbBfDI has ongoing investigations into Meta's AI training with user data from social networks and Meta's Ray-Ban AI glasses.

6. Hamburger Datenschutzforum: Reform des Datenschutz- und KI-Rechts

The Hamburg Data Protection Commissioner (HmbBfDI) and the Hamburg Society for the Promotion of Data Protection will host the 6th Hamburg Data Protection Forum on May 6, 2026, from 14:00–17:00 at the Handelskammer Hamburg. The event will address the EU Digital Omnibus reform of data protection and AI law, with speakers including Thomas Fuchs (HmbBfDI) and Max Schrems discussing proposed changes to GDPR obligations, AI training regulations, and the right of access under Art. 15 GDPR. Attendance is limited and registration is required.