Systemic disclosure of personal data of former vehicle owners in vehicle registration documents raises serious concerns under the GDPR including violations of data minimisation, lack of legal basis and failure to implement privacy by design.
This submission concerns a systemic practice in Germany whereby personal data of former vehicle owners is disclosed to private third parties upon transfer of ownership.
The disclosure includes full names, previous residential addresses and identifiable ownership history.
This practice raises serious concerns under several provisions of the General Data Protection Regulation including data minimisation, lack of legal basis and failure to implement privacy by design.
The issue has cross-border implications within the European Union and affects consumer protection, market fairness and personal security.
Updated 06 Mar 2026 · Institution: Multiple EU and national institutions · Jurisdiction: EU Data Protection Law