Leaked WhatsApp Chat Leads German Woman's Dismissal Case to Highest Court
A German woman's dismissal from her job after private WhatsApp messages were leaked without her consent has reached the Federal Court of Justice (BGH), Germany's highest court. The case hinges on whether the leak constitutes a violation of the General Data Protection Regulation (GDPR), which governs personal data protection in the EU. The core issue is the interpretation of the GDPR's exception for data processing within private life, unrelated to professional or commercial activities. The claimant argues this exception should not apply to her situation, as she is seeking €7,500 in damages for harm suffered and reimbursement for legal costs. The messages, exchanged three years prior, involved the claimant complaining about her boss to a friend. After their friendship soured, the messages were forwarded to the boss's wife, who also worked at the medical practice. The employee was subsequently fired. Initially, a Frankfurt regional court ruled in favor of the dismissed employee, ordering the friend who forwarded the messages to pay €7,500 in damages. The court reasoned that the GDPR exception did not apply because the friend deliberately shared the data with someone connected to the employer, potentially linking the action to commercial interests. However, a higher regional court overturned this decision, stating the GDPR was inapplicable as the forwarding was not related to the defendant's professional or economic activity. This higher court also found that while the act was illicit and intentional interference with the claimant's private sphere, the violations were not severe enough to warrant compensation, especially since the defendant had formally agreed not to repeat the conduct. The case now proceeds to the BGH, with potential referral to the European Court of Justice (ECJ) due to limited precedent on this specific GDPR exception. This could set a significant legal precedent, as the ECJ has not previously examined the GDPR in the context of messaging apps.
This case highlights the evolving tension between private communication and professional consequences in the digital age, particularly under the GDPR's framework. The central legal question revolves around the precise boundary of the 'private life' exemption within data protection law. Future interpretations will need to balance an individual's right to private discourse with the potential for such discourse to indirectly impact professional environments. The outcome could establish critical precedents for how personal data shared in ostensibly private digital spaces is treated when it intersects with employment or other professional contexts, influencing how individuals and employers navigate digital interactions and data privacy in the coming decade. The case underscores the need for clear legal guidance on the scope of private data exceptions in increasingly interconnected digital lives.
AI-generated to prompt reflection — not editorial opinion, not advice, not a statement of fact. How this works.