Dossier

Notification to the European Parliament concerning systemic GDPR violations in vehicle registration practices

Submission informing the European Parliament of a systemic and cross-border data protection issue concerning disclosure of personal data of former vehicle owners in Germany.

Submitted

Case control layer

This dossier is presented as an operational case file. Status, chronology and document layer are fixed so the reader is not left to guess.

InstitutionEuropean Parliament
GDPR, EU Law, Case Submissions

Document layer

Primary public document available

The main public record can be opened directly from this dossier.

This notification informs the European Parliament of a structural data protection issue concerning the disclosure of personal data of former vehicle owners in Germany.

When vehicles are sold, registration documents disclose the names, former addresses and ownership history of previous vehicle holders to private buyers.

This practice raises serious legal concerns under the General Data Protection Regulation including:

  • Article 5 GDPR – data minimisation
  • Article 6 GDPR – lack of legal basis
  • Article 25 GDPR – privacy by design and by default

The issue has cross-border implications within the European internal market and may lead to discrimination, economic harm and security risks.

The submission requests that the matter be forwarded to the Committee on Petitions (PETI), the LIBE Committee and relevant Members of the European Parliament.

Chronology

06 Mar 2026
Public archive update

The public dossier record was updated.

Related cases

Document hub

Archive record

StatusSubmitted
InstitutionEuropean Parliament
JurisdictionEU Data Protection Law
Updated 06 Mar 2026 · Institution: European Parliament · Jurisdiction: EU Data Protection Law