Data Protection Academy » Data Protection News » Data protection and press freedom: regulations for journalists

Data protection and freedom of the press

Data protection and press freedom: regulations for journalists

How do the General Data Protection Regulation and freedom of the press fit together?

The General Data Protection Regulation (GDPR) requires extensive obligations from data controllers when it comes to the processing and storage of personal data. In contrast, the press has the right to edit personal stories, economic incidents or political scandals and make them available to the public. Especially when it comes to explosive topics.

However, data subjects would very rarely consent to processing or publication. This would result in a curtailment of the public interest in information, the so-called "freedom of the press". For this reason, the principle of media privilege applies.

Data protection legislation: the media privilege

The background to the emergence of the media privilege is the safeguarding of the Article 5 Paragraph 1 of the Basic Law guarantees freedom of the press, which is intended to prevent state influence on the media. In the GDPR the media privilege is protected by Article 85 "processing and freedom of expression and information" and states

  1. Member States shall adopt legislative measures to reconcile the right to the protection of personal data under this regulation with the right to freedom of expression and information, including processing for journalistic, scientific, artistic or literary purposes.
  2. With regard to processing for journalistic, scientific, artistic or literary purposes, Member States shall provide for derogations or exceptions from Chapter II (principles), Chapter III (Rights of the data subject), Chapter IV (person responsible and processor), Chapter V (transfer of personal data to third countries or to international organisations), Chapter VI (Independent regulatory bodies), Chapter VII (cooperation and coherence) and Chapter IX (rules applicable to specific processing situations), where this is necessary to reconcile the right to the protection of personal data with freedom of expression and information.
  3. Each Member State shall notify the Commission of the provisions adopted pursuant to paragraph 2 and, without delay, of any subsequent amending or amending legislation.

Explanation

With Article 85, the GDPR provides for a so-called opening clause. This means that each member state may adopt its own rules with regard to the Data protection can make. Thus, Germany can make its own data protection regulations when dealing with journalistic, scientific, artistic or literary content.

External Data Protection Officer

You are welcome to contact us as external data protection officer (DPO) order. We also offer individual consulting services as well as audits and will be happy to provide you with a non-binding offer. You can find more information about our external data protection officers on our website.

Regulation of the media privilege in Germany

Germany has implemented these provisions in the Interstate Broadcasting Treaty (Rundfunkstaatsvertrag) in Sections 9c and 57 RStV and in the individual press laws of the Länder. Previously, the media privilege was regulated in § 41 BDSG. The media privilege has many advantages for people working in the media (e.g. journalists):

  • In the case of editorial activities, the consent of the person concerned is not required if a journalist processes personal data exclusively for journalistic purposes. It is necessary to weigh up the general personal rights of the data subjects against the public interest in information.
  • Journalists do not have to inform data subjects of their rights of access, opposition, etc. in relation to data processing.
  • Journalists only have an obligation to provide information to those affected if general personal rights have been violated. If the journalist has a legitimate interest, such as protection of sources or research, the statement can be refused.

To whom does the media privilege apply

By law, the media privilege applies to "state broadcasting corporations affiliated in the ARD, the ZDF, Deutschlandradio, private broadcasters or companies and auxiliary press companies" (Section 9c RStV) as well as "all media providers active in telemedia and their auxiliary companies" (Section 57 RStV). Similar regulations apply to print media in the state press regulations.

However, the German legal situation is currently still unclear with regard to persons directly working as journalists on behalf of media companies, i.e. freelance journalists and bloggers.

Data protection obligations that must be observed despite media privilege

If a media company or journalist processes data that has no direct connection to journalistic activity (e.g. e-mail addresses for newsletter subscriptions), the provisions of the DSGVO apply without restriction.

However, a recent decision of the 15th Civil Senate of the Higher Regional Court of Cologne also shows the limits of the media privilege. Patient rights as well as medical secrecy must also be taken into account by journalists, such as a Article in the Ärztezeitung makes it clear.

Recommendation from Robin Data

Persons working in the media who by law are not covered by the media privilege because they are not part of a media company or broadcasting organisation should invoke the media privilege in the event that an incident concerning researched personal data is reported. Furthermore, the development of the legal situation should be monitored. Of particular interest are decisions by Data Protection Authorities.

Prof. Dr. Andre Döring

This might interest you too:

Whatsapp Privacy

WhatsApp and privacy

The messenger service WhatsApp is part of the Facebook group to which Instagram also belongs. At the beginning of 2021, Whatsapp announced an adjustment of its privacy policy. What can users do?

Use of social networks by public authorities

Social networks are often not DSGVO compliant. Data protection and social media use in public authorities: Important instrument or contradiction in terms?

Privacy issues in 2020: Interview with the BfDI office

Learn more about: Data processing by Facebook, Goolge & Co. Fines imposed by regulatory authorities. The impact of brexite on data protection in Europe.