Germany has 17 DPAs, each covering a region. Plus there is a federal DPA, apparently. Where do complaints go on cross-border situations? (www.datenschutzkonferenz-online.de)

submitted 1 day ago by ciferecaNinjo@fedia.io to c/Germany@europe.pub

7 comments fedilink hide all child comments

(crossposted from !gdpr)

Where should an Article 77 GDPR complaint be sent when a cross-border scenario involves a data subject outside of Germany?

Do data subjects have a choice between the federal agency and the regional?

I could not find any PDF forms for art.77 complaints in Germany. Do they exist?

The list of agencies is on this page:

https://www.datenschutzkonferenz-online.de/datenschutzaufsichtsbehoerden.html

you are viewing a single comment's thread
view the rest of the comments

[-] A_norny_mousse@piefed.zip 1 points 1 day ago* (last edited 1 day ago)

Art. 77 says:

Jede betroffene Person hat unbeschadet eines anderweitigen verwaltungsrechtlichen oder gerichtlichen Rechtsbehelfs das Recht auf Beschwerde bei einer Aufsichtsbehörde, insbesondere in dem Mitgliedstaat ihres gewöhnlichen Aufenthaltsorts, ihres Arbeitsplatzes oder des Orts des mutmaßlichen Verstoßes

Every person has, without prejudice to any other administrative or judicial remedy, the right to lodge a complaint with a supervisory authority, in particular in the Member country of his or her habitual residence, place of work or the place of the alleged infringement

You need a "Aufsichtsbehörde". And it says that it doesn't matter if it's it's where you live, work, or where the bad thing happened.

BTW, the word "Staat" does NOT refer to one of Germany's regions but to the whole country. So, a "staatliche (federal) Aufsichtsbehörde" would be best I guess.

Art 78 is short, you should read it, and further Art 78 I guess.

this post was submitted on 20 Feb 2026

2 points (100.0% liked)

Germany

176 readers

5 users here now

founded 11 months ago

MODERATORS

tfm@europe.pub