View source for AG Frankfurt am Main - 31 C 2043/22 (78)

{{COURTdecisionBOX

|Jurisdiction=Germany
|Court-BG-Color=
|Courtlogo=Courts_logo1.png
|Court_Abbrevation=AG Frankfurt am Main
|Court_Original_Name=Amtsgericht Frankfurt am Main
|Court_English_Name=Local Court Frankfurt am Main
|Court_With_Country=AG Frankfurt am Main (Germany)

|Case_Number_Name=31 C 2043/22 (78)
|ECLI=ECLI:DE:AGFFM:2023:0314.31C2043.22.78.00

|Original_Source_Name_1=Citizen Service Hessenrecht 
|Original_Source_Link_1=https://www.lareda.hessenrecht.hessen.de/bshe/document/LARE230004383
|Original_Source_Language_1=German
|Original_Source_Language__Code_1=DE
|Original_Source_Name_2=
|Original_Source_Link_2=
|Original_Source_Language_2=
|Original_Source_Language__Code_2=

|Date_Decided=14.03.2023
|Date_Published=
|Year=2023

|GDPR_Article_1=Article 4 GDPR
|GDPR_Article_Link_1=Article 4 GDPR
|GDPR_Article_2=Article 15(3) GDPR
|GDPR_Article_Link_2=Article 15 GDPR#3
|GDPR_Article_3=Article 15(4) GDPR
|GDPR_Article_Link_3=Article 15 GDPR#4
|GDPR_Article_4=
|GDPR_Article_Link_4=
|GDPR_Article_5=
|GDPR_Article_Link_5=

|EU_Law_Name_1=
|EU_Law_Link_1=
|EU_Law_Name_2=
|EU_Law_Link_2=

|National_Law_Name_1=
|National_Law_Link_1=
|National_Law_Name_2=
|National_Law_Link_2=

|Party_Name_1=
|Party_Link_1=
|Party_Name_2=
|Party_Link_2=

|Appeal_From_Body=
|Appeal_From_Case_Number_Name=
|Appeal_From_Status=
|Appeal_From_Link=
|Appeal_To_Body=
|Appeal_To_Case_Number_Name=
|Appeal_To_Status=Unknown
|Appeal_To_Link=

|Initial_Contributor=
|
}}

A language test provider can refuse to provide an applicant with a perfect copy of their test insofar as its interest in secrecy of the questions outweights the right to access of the applicant. 

== English Summary ==

=== Facts ===
After failing a language test, a data subject requested the test provider (controller) to provide her a copy of her examination paper under [[Article 15 GDPR#3|Article 15(3) GDPR]]. The controller offered the data subject to consult her paper at its office but refused to provide a copy. It argued that the majority of the paper did not contain personal data under the meaning of [[Article 4 GDPR|Article 4 GDPR]] and that it had an interest in secrecy that justified its refusal to provide a copy under [[Article 15 GDPR#4|Article 15(4) GDPR]]. Unsatisfied, the data subject brought an action with the Amstgericht Frankfurt (local Court of Frankfurt). 

=== Holding ===
''First'', the Court did not follow the controller's argument concerning the non-personal nature of the data included in the paper. Indeed, the answers of the data subjects and the comments of the examiner constituted personal data under [[Article 4 GDPR|Article 4 GDPR]]. The test questions however were not personal data. 

''Second'', the Court weighed up the right of the data subject to obtain a copy and the interest of the controller in secrecy under [[Article 15 GDPR#4|Article 15(4) GDPR]]. It considered that the test questions constituted trade secrets within the meaning of national provisions and that the development of these language test represented a complex procedure involving considerable economic effort. These tests are used in naturalization procedure and due to a lack of secrecy, there could be a risk that the examination would no longer be considered sufficient to determine language skills for this purpose. As a result, the entrepreneurial freedom of the controller could be threatened. 

The Court therefore considered that on the basis of its interest to secrecy, the controller could refuse to provide a copy under [[Article 15 GDPR#4|Article 15(4) GDPR]]. It also took into account that the right to access was not entirely denied since the data subject could consult her paper at the controller’s office.

== Comment ==
It appears curious that the holding focuses on this interest in secrecy and not on the entrepreneurial freedom since the text of [[Article 15 GDPR|Article 15(4)]] refers to "''rights and freedoms of others''". Also, the Court does not explain how these interests are ''adversely'' affected. This appears as a very flexible interpretation of [[Article 15 GDPR|Article 15(4) GDPR]]. According to the [https://edpb.europa.eu/system/files/2022-01/edpb_guidelines_012022_right-of-access_0.pdf EDPB guidelines on the right of access], "''the controller must be able to demonstrate that in the concrete situation rights or freedoms of others would factually be impacted''." (§170). However, in this case, the risk associated with providing a copy of the test to one data subject appears potential. 

== Further Resources ==
''Share blogs or news articles here!''

== English Machine Translation of the Decision ==
The decision below is a machine translation of the German original. Please refer to the German original for more details.

<pre>
If you see this message, you do not have Javascript enabled in your browser. Please enable Javascript to use the application.
</pre>