Data Protection Academy » Data Protection News » Data protection and press freedom: regulations for journalists
Data protection and press freedom: regulations for journalists
How do the General Data Protection Regulation and freedom of the press fit together?
The General Data Protection Regulation (GDPR) requires extensive obligations from data controllers when it comes to the processing and storage of personal data. In contrast, the press has the right to edit personal stories, economic incidents or political scandals and make them available to the public. Especially when it comes to explosive topics.
However, data subjects would very rarely consent to processing or publication. This would result in a curtailment of the public interest in information, the so-called "freedom of the press". For this reason, the principle of media privilege applies.
Data protection legislation: the media privilege
The background to the emergence of the media privilege is the safeguarding of the Article 5 Paragraph 1 of the Basic Law guarantees freedom of the press, which is intended to prevent state influence on the media. In the GDPR the media privilege is protected by Article 85 "processing and freedom of expression and information" and states
- Member States shall adopt legislative measures to reconcile the right to the protection of personal data under this regulation with the right to freedom of expression and information, including processing for journalistic, scientific, artistic or literary purposes.
- With regard to processing for journalistic, scientific, artistic or literary purposes, Member States shall provide for derogations or exceptions from Chapter II (principles), Chapter III (Rights of the data subject), Chapter IV (person responsible and processor), Chapter V (transfer of personal data to third countries or to international organisations), Chapter VI (Independent regulatory bodies), Chapter VII (cooperation and coherence) and Chapter IX (rules applicable to specific processing situations), where this is necessary to reconcile the right to the protection of personal data with freedom of expression and information.
- Each Member State shall notify the Commission of the provisions adopted pursuant to paragraph 2 and, without delay, of any subsequent amending or amending legislation.
Explanation
With Article 85, the GDPR provides for a so-called opening clause. This means that each member state may adopt its own rules with regard to the Data protection can make. Thus, Germany can make its own data protection regulations when dealing with journalistic, scientific, artistic or literary content.
External Data Protection Officer
You are welcome to contact us as external data protection officer (DPO) order. We also offer individual consulting services as well as audits and will be happy to provide you with a non-binding offer. You can find more information about our external data protection officers on our website.
Regulation of the media privilege in Germany
Germany has implemented these provisions in the Interstate Broadcasting Treaty (Rundfunkstaatsvertrag) in Sections 9c and 57 RStV and in the individual press laws of the Länder. Previously, the media privilege was regulated in § 41 BDSG. The media privilege has many advantages for people working in the media (e.g. journalists):
- In the case of editorial activities, the consent of the person concerned is not required if a journalist processes personal data exclusively for journalistic purposes. It is necessary to weigh up the general personal rights of the data subjects against the public interest in information.
- Journalists do not have to inform data subjects of their rights of access, opposition, etc. in relation to data processing.
- Journalists only have an obligation to provide information to those affected if general personal rights have been violated. If the journalist has a legitimate interest, such as protection of sources or research, the statement can be refused.
To whom does the media privilege apply
By law, the media privilege applies to "state broadcasting corporations affiliated in the ARD, the ZDF, Deutschlandradio, private broadcasters or companies and auxiliary press companies" (Section 9c RStV) as well as "all media providers active in telemedia and their auxiliary companies" (Section 57 RStV). Similar regulations apply to print media in the state press regulations.
However, the German legal situation is currently still unclear with regard to persons directly working as journalists on behalf of media companies, i.e. freelance journalists and bloggers.
Data protection obligations that must be observed despite media privilege
If a media company or journalist processes data that has no direct connection to journalistic activity (e.g. e-mail addresses for newsletter subscriptions), the provisions of the DSGVO apply without restriction.
However, a recent decision of the 15th Civil Senate of the Higher Regional Court of Cologne also shows the limits of the media privilege. Patient rights as well as medical secrecy must also be taken into account by journalists, such as a Article in the Ärztezeitung makes it clear.
Recommendation from Robin Data
Persons working in the media who by law are not covered by the media privilege because they are not part of a media company or broadcasting organisation should invoke the media privilege in the event that an incident concerning researched personal data is reported. Furthermore, the development of the legal situation should be monitored. Of particular interest are decisions by Data Protection Authorities.
- COVID-19 and data protection - March 25, 2020
- Data protection in the USA - part 3 of the delegation visit - December 6, 2019
- Data protection in the USA - part 2 of the delegation visit - December 3, 2019