StaatsNavigator
Miscellaneous

File a privacy complaint

Filing a complaint with the state data protection authority regarding alleged violations of the GDPR by companies or government agencies.

Processing: approx. 2 months
Online application possibleSuccess rate: 55.0 %

How to proceed

  1. 1

    Contact the person in charge

    First, exercise your right to access or deletion directly.

  2. 2

    File a complaint with the data protection authority

    Online form with a description of the facts and supporting documents.

  3. 3

    Review by the authority

    May result in a warning, an order, or a fine for the person responsible.

Required documents

  • Correspondence with the data controllerOften forgotten

Responsible authority

The authority of your main place of residence is responsible.Find authority →

Fees

Varies by case

Processing time

approx. 2 months

Official: max. approx. 3 months

Online application

Online possible – at the responsible authority

Common mistakes

  • Previous complaint to the data controller (company) was not documented
  • Facts of the case are insufficiently described

Common reasons for rejection

  • No violation of the GDPR was found
  • To clarify the facts of the case under civil law

You can usually file an objection against a rejection.

The essentials before applying

Who is eligible?

Any data subject whose personal data has been processed unlawfully.

Income limit

The limit varies by household and region – see the table at the responsible authority or in the application assistant.

Processing time

Nationwide: approx. approx. 2 months

Success rate

approx. 55.0 % (estimate)

Most common mistakes

  • Previous complaint to the data controller (company) was not documented
  • Facts of the case are insufficiently described

Common reasons for rejection

  • No violation of the GDPR was found
  • To clarify the facts of the case under civil law

Alternatives

  • Check related services in the application assistant
  • Use social counselling before applying

If rejected

File a written objection within 30 days – with reasons why the decision is wrong and any missing evidence.

Questions & Answers

Does filing a data protection complaint cost anything?

No, filing a complaint with the supervisory authority is free of charge for those affected.

Read more