Germany
A Obstacles to Access | 23 25 |
B Limits on Content | 28 35 |
C Violations of User Rights | 26 40 |

While the overall state of internet freedom in Germany remains robust, internet freedom declined during the coverage period. New pieces of legislation that continue to expand the online surveillance powers of domestic and foreign intelligence services, as well as police authorities, raise privacy concerns, particularly laws allowing for the monitoring of citizens’ and online activities justified as a preventive measure and those requiring online platforms and messaging services to turn over user information to the police. However, the media and civil society frequently and openly discuss the state of internet freedom in Germany. Issues, such as the European Union (EU) order to block Russian-state owned media outlets, are often given great prominence in widely read online news publications. An independent court system provides oversight on regulatory measures adopted by the executive and the legislature.
Germany is a representative democracy with a vibrant political culture and civil society. Political rights and civil liberties are largely assured both in law and practice. The political system is influenced by the country’s totalitarian past, with constitutional safeguards designed to prevent authoritarian rule. Although Germany has generally been stable since the mid-20th century, political tensions have grown following an influx of asylum seekers, the popularity of a right-wing populist party, the COVID-19 pandemic, the effects of the Russian war in Ukraine and due to the persistent popularity of conspiracy movements.
- The gap in internet penetration rates between western and eastern Germany narrowed during the coverage period (see A2).
- In March 2022, amid Russia’s brutal invasion of Ukraine, Germany complied with an EU order mandating member states block Russian state-owned online media outlets in an effort to combat war propaganda (see B1).
- For the first time, Telegram complied with German government orders to restrict access to Telegram channels because they violated local law (see B2).
- In 2021, law enforcement raided the homes of over 100 individuals who allegedly posted hateful speech or insulted politicians (see C2 and C3).
- According to a June 2021 law, German intelligence services can use Quellen-TKÜ Plus spyware (Staatstrojaner), and providers are obligated to assist in the installation (see C5).
- A December 2021 amendment to the Telecommunications Act (TKG) requires messaging and email services to hand over user information to law enforcement. However, in March 2022 the Cologne Administrative Court ruled that Google and Meta do not have to transfer personal data of users publishing hate speech and illegal content to the BKA (Federal Criminal Police Office), which they were mandated to do under a June 2020 amendment to the Network Enforcement Act (NetzDG) (see C6).
- The government faced cyberattacks during the elections. According to the Federal Office for Information Security (BSI) the overall situation concerning IT security in Germany is considered "tense to critical” (see C8).
Do infrastructural limitations restrict access to the internet or the speed and quality of internet connections? | 6.006 6.006 |
Germany’s network infrastructure for information and communication technologies (ICTs) is well developed, and its overall internet penetration rate is above the European Union (EU) average; in 2021, 92 percent of German residents used the internet.1 According to 2021 data from the International Telecommunication Union (ITU), the fixed broadband penetration rate was 44.2 percent while the mobile broadband penetration rate was 94.3 percent.2
The most widely used mode of fixed-line internet access is still DSL (digital subscriber line), with 25.9 million connections in 2021.3 Fiber-optic connections are becoming more widespread.4 Connections with speeds of more than 50 Mbps are available in about 93.2 percent of German households.5
Despite earlier government promises to quickly provide high-speed internet access to every household,6 the government failed to hit its target of ensuring every household had access to a connection speed of at least 50 Mbps by the end of 2018.7 For years, the government struggled to make significant progress towards that goal, with 13.8 percent of German households having access to a fiber-optic connection, compared to an EU average of 33.5 percent.8 In November 2021, the newly elected coalition of the Social Democratic Party (SPD), Alliance 90/The Greens (Bündnis 90/Die Grünen), and Free Democratic Party (FDP) announced their plan to offer widespread fiber-optic connections by focusing on regional “white spots” and reducing bureaucratic barriers.9 In March 2022, the Federal Ministry for Digital and Transport (BMDV) promised to triple connections by 2025 and provide countrywide to-the-home connections by 2030.10
In 2021, internet access via mobile devices increased further: 82 percent of citizens aged 14 and upwards are online via mobile devices, increasing from 80 percent the year before.11
The availability of public internet connections has been historically low in Germany compared to other industrialized countries.12 However, recent legal changes have led to an increase of publicly available Wi-Fi hotspots, including in cafés and high-speed trains (see B3). The decision to designate free community Wi-Fi providers as not-for-profit enterprises—which was initially proposed by the Bundesrat (Federal Council) in 2017 and approved in December 2020—entails considerable tax advantages (see A2).
According to January 2022 data from Statista, the median download speed for a fixed-line broadband connection in Germany was 69.52 Mbps.13
- 1Eurostat, “Individuals – internet use,” last updated February 4, 2022, https://appsso.eurostat.ec.europa.eu/nui/show.do?dataset=isoc_ci_ifp_iu….
- 2International Telecommunication Union, “Fixed Broadband,” ITU World Telecommunication/ICT Indicators 2021 Database, accessed September 2021, https://www.itu.int/en/ITU-D/Statistics/Pages/s tat/default.aspx
- 3Dialog Consult and VATM, “23. TK-Marktanalyse Deutschland 2020 [23rd ICT Market Analysis Germany 2020],” p. 11, October 28, 2021, https://www.vatm.de/wp-content/uploads/2021/10/VATM_TK-Marktstudie_2810… also see: Bundesnetzagentur, “Tätigkeitsbericht: Telekommunikation 2020/2021 [Progress report: Telecommunication 2020/2021],“ December, 2021 https://www.bundesnetzagentur.de/SharedDocs/Mediathek/Berichte/2021/TTB….
- 4Dialog Consult and VATM, “23. TK-Marktanalyse Deutschland 2020 [23rd ICT Market Analysis Germany 2020],” p. 11, October 28, 2021, https://www.vatm.de/wp-content/uploads/2021/10/VATM_TK-Marktstudie_2810… see: Tagesschau, “Glasfaserausbau in Deutschland – Ziele kaum noch zu erreichen [Fiber-optic rollout in Germany - goals almost impossible to achieve],“ last updated: February 26, 2021 https://www.tagesschau.de/investigativ/kontraste/breitbandausbau-103.ht….
- 5Bundesministerium für Digitales und Verkehr, “Bericht zum Breitbandatlas [Report on broadbandmapping],“ p.40, 2021, https://www.bmvi.de/SharedDocs/DE/Anlage/DG/Digitales/bericht-zum-breit….
- 6Thomas Heuzeroth, “Industrie investiert Milliarden in Breitbandausbau [Industry invests billions in broadband development],“ Welt, October 7, 2014, https://www.welt.de/wirtschaft/webwelt/article133026254/Industrie-inves…
- 7Vera Weidenbach, “Bitte warten... [Please wait…],” Zeit Online, January 23, 2019, https://www.zeit.de/2019/05/breitbandausbau-schnelles-internet-land-foe…; “Broadband in the EU Member States: despite progress, not all the Europe 2020 targets will be met”, European Court of Auditors, Special Report no. 12 (2018), http://publications.europa.eu/webpub/eca/special-reports/broadband-12-2…
- 8Daniel Donath, “Ziele kaum noch zu erreichen [Goals almost immpossible to reach],“ February 26, 2021, https://www.tagesschau.de/investigativ/kontraste/breitbandausbau-103.ht…
- 9Federal Government, “Mehr Fortschritt wagen [Daring progress]“, p.16, November 24 2021, https://www.bundesregierung.de/breg-de/service/gesetzesvorhaben/koaliti….
- 10Federal Ministry for Digital and Transport,“Bundesdigitalminister Wissing legt Eckpunkte zur Gigabitstrategie vor [Minister for Digital presents corner points for gigabit strategy],“ March 17, 2022, https://www.bmvi.de/SharedDocs/DE/Pressemitteilungen/2022/010-wissing-e…
- 11Initiative D21, “ D21 Digital-Index 2021/2022“, p.14, February 23, 2022, https://initiatived21.de/d21index21-22/
- 12Statista, “Verfügbarkeit von WLAN-Hotspots in ausgewählten Ländern nach Anzahl je 100.000 Einwohner im Jahr 2011 [Availability of WLAN hotspots in selected countries by number per 100,000 inhabitants in 2011]“ April 15, 2011, https://de.statista.com/statistik/daten/studie/165018/umfrage/verfuegba….
- 13Statista,“Durchschnittliche Verbindungsgeschwindigkeit der Internetanschlüsse (Festnetz) in den führenden Ländern/Territorien weltweit im Januar 2022 [Avarage download spead of broadband connections for leading countries/territories wordwide in January 2022], March 15, 2022, https://de.statista.com/statistik/daten/studie/224924/umfrage/internet-…
Is access to the internet prohibitively expensive or beyond the reach of certain segments of the population for geographical, social, or other reasons? | 3.003 3.003 |
Score Change: The score improved from 2 to 3 because the gap in internet penetration rates between western Germany and eastern Germany narrowed during the coverage period.
Telecommunications services prices stagnated from 2020 to 2021, according to the most recent official statistics.1 In 2020, expenses for such services amounted to 2.6 percent of available household income.2 Economist Impact’s 2022 Inclusive Internet Index ranks Germany 20th out of 120 countries in affordability, defined by cost of access relative to income and the level of competition in the internet marketplace.3
Persistent differences in internet usage based on income demonstrate that prices remain a barrier for people with low incomes and the unemployed.4 While 98 percent of employed German residents use the internet, only 81 percent of the unemployed do.5 In relation, 98 percent of German residents with university degrees use the internet, while 76 percent of residents without secondary school degrees do.6
The gender and age gap in internet access has converged in recent years. The development stagnated at a 2 percent difference, with 95 percent of men and 93 percent of women using the internet in 2021.7 In the 16-to-44-year age group, daily usage of the internet remained stable at 98 percent, while frequent usage increased from 76 percent to 79 percent among those aged 65 to 74 in 2021.8
Although differences in internet use continue to exist between Germany’s western and eastern regions, popular internet usage in the former German Democratic Republic (DDR) increased from 81 percent in 2020 to an average of 87 percent in 2021.9 Meanwhile, the gap in internet use between urban centers (with at least 500,000 residents) and rural areas stands at 4 percent.10
- 1Statistisches Bundesamt, „Verbraucherpreisindizenz für Deutschland, Jahresdurchschnitte,“ accessed September 2022, https://www.destatis.de/DE/Themen/Wirtschaft/Preise/Verbraucherpreisind….
- 2Statistisches Bundesamt, “Private Konsumausgaben und verfügbares Einkommen – 4. Vierteljahr 2021 [Private Expenses and Available Income – 4th Quarter 2021],” March 2022, p. 26, https://www.destatis.de/DE/Themen/Wirtschaft/Volkswirtschaftliche-Gesam…
- 3Economist Impact, “Germany—Affordability,” Inclusive Internet Index 2022, Overall Rankings,” accessed September 2022, https://theinclusiveinternet.eiu.com/explore/countries/DE/performance/i….
- 4Initiative D21, “D21 Digital Index 2021/2022,“ p. 20, https://initiatived21.de/app/uploads/2022/02/d21-digital-index-2021_202….
- 5Initiative D21, “D21 Digital Index 2021/2022,“ p. 17, https://initiatived21.de/app/uploads/2022/02/d21-digital-index-2021_202….
- 6Initiative D21, “D21 Digital Index 2021/2022,“ p. 16, https://initiatived21.de/app/uploads/2022/02/d21-digital-index-2021_202….
- 7Statistisches Bundesamt, “Internetnutzer/-innen und Online-Einkäufer/-innen 2021 [ Internet users and online shoppers 2021],“ https://www.destatis.de/DE/Themen/Gesellschaft-Umwelt/Einkommen-Konsum-….
- 8Statistisches Bundesamt, “Durchschnittliche Nutzung des Internets durch Personen nach Alter [Average Internet Usage According to Age 2021],“ https://www.destatis.de/DE/Themen/Gesellschaft-Umwelt/Einkommen-Konsum-….
- 9Iniative D21, “D21 Digital Index 2021/2022,“ p. 18, https://initiatived21.de/app/uploads/2022/02/d21-digital-index-2021_202….
- 10Initiative D21, “D21 Digital Index 2020/2“ p. 17, https://initiatived21.de/app/uploads/2022/02/d21-digital-index-2021_202….
Does the government exercise technical or legal control over internet infrastructure for the purposes of restricting connectivity? | 6.006 6.006 |
The German government does not impose restrictions on ICT connectivity. Germany’s telecommunications infrastructure is largely decentralized and the variety of regional providers is unique. There are more than a hundred internet-backbone providers in the country.1
Privatized in 1995, the formerly state-owned Deutsche Telekom remains the only company that acts as both a backbone provider and an internet service provider (ISP). However, the German state owns less than a third of its shares, which crucially limits government control.2 There are a number of connections in and out of Germany, the most important being the DE-CIX (German Commercial Internet Exchange), which is located in Frankfurt. It is privately operated by Eco, the professional association of the German internet industry.3
According to the Federal Network Agency (BNetzA), there was no legal basis for internet shutdowns or connectivity restrictions on the federal level as of 2016.4 However, some state-level legislation on police powers grants limited restriction measures (see C5).
- 1Björn Brodersen and Alexander Kuch, “Backbones – die starken Hintergrundnetze des Internets” [Backbones – the strong background networks of the internet], teltarif.de, accessed September 2022, https://www.teltarif.de/internet/backbone.html.
- 2Telekom, “Shareholder Structure,” last updated December 31, 2021, https://www.telekom.com/en/investor-relations/company/shareholder-struc….
- 3DE-CIX, “About DE-CIX,” https://www.de-cix.net/about/.
- 4Jannis Brühl, “Wenn der Staat das Internet abschaltet“ [When the state turns the internet off], Süddeutsche Zeitung, May 19, 2016, https://www.sueddeutsche.de/digital/zensur-wenn-die-regierung-das-inter….
Are there legal, regulatory, or economic obstacles that restrict the diversity of service providers? | 5.005 6.006 |
The telecommunications sector was liberalized in the 1990s with the aim of fostering competition. Commercial service providers must notify the BNetzA before launching services, but do not need licenses.1
Deutsche Telekom’s share of the fixed-line broadband market decreased slightly to 38.7 percent in 2021.2 Vodafone held 30.2 percent in 2021. Other ISPs with significant market share include 1&1 with 11.7 percent and O2-Telefónica with 6.3 percent.3 Public subsidies for increasing broadband connectivity have been criticized for favoring Deutsche Telekom.4
German residents seeking mobile services can choose from three major service providers: Vodafone, with a 38.7 percent market share; Telefónica Deutschland, with 29.6 percent, and T-Mobile (Deutsche Telekom), with 31.7 percent.5 In August 2019, Drillisch Netz AG (a subsidiary of 1&1 Drillisch) joined Deutsche Telekom, Vodafone, and Telefónica Deutschland in securing fifth-generation (5G) technology spectrum frequency blocks, diversifying the mobile market.6 The transmission infrastructure for 5G was expanded in 2021 with 29,959 wireless base stations, compared to 139 in 2019 and 19,150 in 2020. In its 2021 annual report, BNetzA disclosed that 16 percent of transmission stations were 5G ready.7
- 1“The Technology, Media And Telecommunications Review,“ Edition 10, ed. John P. Janka, December 2019, https://thelawreviews.co.uk/edition/the-technology-media-and-telecommun….
- 2Dialog Consult and VATM, “22. TK-Marktanalyse Deutschland 2020 [22nd ICT Market Analysis Germany 2020],“ p. 12, October 28, 2021, https://www.vatm.de/wp-content/uploads/2021/10/VATM_TK-Marktstudie_2810….
- 3Dialog Consult and VATM, “22. TK-Marktanalyse Deutschland 2020 [22nd ICT Market Analysis Germany 2020],“ p. 12, October 28, 2021, https://www.vatm.de/wp-content/uploads/2021/10/VATM_TK-Marktstudie_2810….
- 4Tomas Rudl, “Breitbandausbau: Die meisten Fördermittel fließen an die Telekom Deutschland [Broadband expansion: Most subsidies are allocated to Telekom Deutschlad],“ Netzpolitik, October 23, 2018, https://netzpolitik.org/2018/breitbandausbau-die-meisten-foerdermittel-….
- 5Dialog Consult and VATM, “22. TK-Marktanalyse Deutschland 2020 [22nd ICT Market Analysis Germany 2020],“ p. 22, October 6, 2020, https://www.vatm.de/wp-content/uploads/2020/10/VATM_TK-Marktstudie-2020….
- 6Bundesnetzagentur, “Mobile broadband - project 2018,” https://www.bundesnetzagentur.de/EN/Areas/Telecommunications/Companies/….
- 7Bundesnetzagentur, “Jahresbericht 2020 [Annual report 2020],“ June 6, 2022, p. 64, https://www.bundesnetzagentur.de/SharedDocs/Mediathek/Jahresberichte/JB….
Do national regulatory bodies that oversee service providers and digital technology fail to operate in a free, fair, and independent manner? | 3.003 4.004 |
Internet access, both fixed-line and mobile, is regulated by BNetzA, which has operated since early 2014 under the Federal Ministry for Economic Affairs and Energy (now known as the Federal Ministry for Economic Affairs and Climate Action, or BMWK).1 The president and vice president of the agency are appointed to five-year terms by the federal government following recommendations from an advisory council consisting of 16 members from the Bundestag (federal parliament) and 16 representatives from the Bundesrat.2 The German Monopolies Commission and the European Commission (EC) have both criticized this highly political structure and the concentration of important regulatory decisions in the presidential chamber of the BNetzA.3 The European Court of Justice (ECJ)—the EU’s supreme court and a part of the Court of Justice of the European Union (CJEU)—upheld a complaint by the EC, ruling in September 2021 that the BNetzA would need to become more independent. The BNetzA is now restructuring their operations, while upholding the former law during the interim period.4
In addition, regulatory decisions by the BNetzA have been criticized for providing a competitive advantage to Deutsche Telekom, the former state-owned monopoly,5 most recently in 2015.6
In January 2021, federal legislators amended the Act against Restraints of Competition (Competition Act, or GWB) via the GWB Digitization Act, which created specific antitrust protocols for digital platforms “with overwhelming importance for competition across multiple markets.”7
- 1Markus Beckedahl, “Verkehrsministerium gewinnt Fachaufsicht über Bundesnetzagentur”[Ministry of Transport gains supervision over Federal Network Agency],“ Netzpolitik, February 14, 2014, https://netzpolitik.org/2014/verkehrsministerium-gewinnt-fachaufsicht-u….
- 2Bundesministerium der Justiz und für Verbraucherschutz, “Gesetz über die Bundesnetzagentur für Elektrizität, Gas, Telekommunikation, Post und Eisenbahnen [Law on the Federal Network Agency for Electricity, Gas, Telecommunications, Post and Railways],“ §3, Abs. 3 BEGTPG. July 7, 2005, https://www.gesetze-im-internet.de/begtpg/index.html#BJNR200900005BJNE0….
- 3Monopolkommission [Monopolies Commission], “Telekommunikation 2009: Klaren Wettbewerbskurs halten [Telecommunication 2009: stay on target in competition],” Sondergutachten 56, 2009, p. 75, https://web.archive.org/web/20100821121829/http://www.monopolkommission…; European Commission, “Progress Report on the Single European Electronic Communications Market (15th Report),” October 31, 2013, https://ec.europa.eu/digital-single-market/en/news/progress-report-sing….
- 4Bundesnetzagentur, “Bundesnetzagentur zur Entscheidung des Europäischen Gerichtshofs in Energiesache,“ September 2, 2021, https://www.bundesnetzagentur.de/SharedDocs/Pressemitteilungen/DE/2021/…
- 5Since the Federal Republic still exercises its rights as a shareholder of Deutsche Telekom, commentators see a potential conflict of interest. See: Christian Schmidt, “Von der RegTP zur Bundesnetzagentur. Der organisationsrechtliche Rahmen der neuen Regulierungsbehörde [From RegTP to Federal Network Agency. The organizational framework of the new regulator],“ Die Öffentliche Verwaltung 58 (24), 2005, p. 1028
- 6Tomas Rudl, “Breitbandausbau: Telekom-Vectoring kommt näher [Broadband development: Telekom vectoring approaches],“ Netzpolitik, November 23, 2015, https://netzpolitik.org/2015/breitbandausbau-telekom-vectoring-rueckt-n….
- 7“Germany Adopts New Competition Rules for Tech Platforms,” Jones Day, January 2021, https://www.jonesday.com/en/insights/2021/01/germany-adopts-new-competi….
Does the state block or filter, or compel service providers to block or filter, internet content, particularly material that is protected by international human rights standards? | 4.004 6.006 |
Score Change: The score declined from 5 to 4 to reflect the government’s implementation of a European Union regulation ordering member states to block the websites of RT and Sputnik, as well as their local subsidiaries.
The government rarely blocks websites or internet content,1 however, during the coverage period it blocked the websites of Russian state-owned media outlets in response to an EU regulation. All major social media platforms and international blog-hosting services are freely available.
In early March 2022, following the Russian government’s brutal invasion of Ukraine, the EU Council issued Regulation 2022/350, ordering member states to “urgently suspend the broadcasting activities” of Russian-state owned websites, including RT, Sputnik, RT France, RT Germany, RT Spanish, and RT UK, and to block their websites because they “engaged in continuous and concerted propaganda actions targeted at civil society.”2 The order applied to ISPs and mobile operators in Germany.3 In June 2022, after the coverage period, the European Union adopted a new package of sanctions, which also included directives to block Rossiya RTR/RTR Planeta, Rossiya 24/Russia 24, and TV Centre International.4
In February 2022, prior to the EU ban on Russian state-funded outlets, Germany’s regulatory media supervisor banned RT Germany, which included the blocking of their channel’s website, because German law does not allow media channels to operate if they are completely owned by the government (see B6).5
In February 2018, a regional court in Munich instructed Vodafone to block the video-streaming website kinox.to, in response to a film distributor’s complaint that the site was hosting content in violation of copyright law.6 The injunction marked the first court-ordered blocking of a pirate website in Germany. A 2015 Federal Court of Justice (BGH) ruling empowered copyright holders to seek such injunctions against pirate websites (see B3).7
Vodafone has continued to block streaming and file-sharing websites, including bs.to and s.to, beginning in 2018,8 and boerse.to, in 2019, in response to complaints from rights holders.9
- 1Due to substantial criticism by activists and NGOs that provoked an intense political debate, the 2010 law on blocking websites containing child pornography, known as the Access Impediment law (Zugangserschwerungsgesetz), never came into effect and was finally repealed by the German parliament in December 2011.
- 2“COUNCIL REGULATION (EU) 2022/350 of 1 March 2022 amending Regulation (EU) No 833/2014 concerning restrictive measures in view of Russia's actions destabilising the situation in Ukraine,” Official Journal of the European Union, Volume 65, March 2, 2022, https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=OJ:L:2022:065:F….
- 3Anna Biselli“EU bans distribution of RT and Sputnik,” Netzpolitik, March 2, 2022, https://netzpolitik.org/2022/sanktionen-gegen-russland-eu-verbietet-ver….
- 4Chris Dziadul, “EU bans more Russian channels,” Broadband TV News, June 9, 2022, https://www.broadbandtvnews.com/2022/06/09/eu-bans-more-russian-channel….
- 5Steffen Grimberg, “Warum RT DE gleich doppelt verboten ist [RT DE faces two bans], MDR, March 15, 2022, https://www.mdr.de/medien360g/medienpolitik/warum-rt-verboten-ist-100.h….
- 6Benjamin Lotz and Lutz Reulecke, “First blocking order in Germany to prevent access to copyright infringing website,” Kluwer Copyright Blog, May 10, 2018, http://copyrightblog.kluweriplaw.com/2018/05/10/first-blocking-order-ge…
- 7Ernesto Van der Sar, “Supreme Court Opens Door for Pirate Site Blockades in Germany,” TorrentFreak, November 26, 2015, https://torrentfreak.com/supreme-court-opens-door-for-pirate-site-block…
- 8Andy Maxwell, “Vodafone Blocks Two Pirate Streaming Sites Without a Court Order,” TorrentFreak, December 21, 2018, https://torrentfreak.com/vodafone-blocks-two-pirate-streaming-sites-wit…
- 9A copyright complaint from the music rights group GEMA: Ernesto Van der Sar, “Vodafone Germany Blocks Popular Pirate Forum to Avoid Lawsuit,” TorrentFreak, March 28, 2019, https://torrentfreak.com/vodafone-germany-blocks-popular-pirate-forum-t…
Do state or nonstate actors employ legal, administrative, or other means to force publishers, content hosts, or digital platforms to delete content, particularly material that is protected by international human rights standards? | 2.002 4.004 |
Most content-removal issues in Germany relate to the removal of search engine results (deindexing) rather than actual deletions of content. However, pressure on social media companies to remove content from their platforms has increased since the implementation of NetzDG, which imposes severe fines if certain illegal content is not removed promptly (see B3).
Under the law, social media companies that receive over 100 content-related complaints each year must disclose how they handled those complaints every six months. These complaints come from either users or complaints bodies, such as children’s rights watchdog Jugendschutz.net. According to a November 2018 analysis from the Center for European Policy Studies, “NetzDG has failed to generate any additional press reports of dubious false positives” since a series of January 2018 controversies.1 However, the effectiveness of NetzDG is difficult to measure.2
Since NetzDG came into effect in January 2018, controversial content removals—particularly those involving satirical posts and accounts—have occasionally been reported.3 These removals illustrate a fundamental problem with the law: if taken out of context, posts on social media platforms may fall within the scope of hate speech provisions embedded in the criminal code.4
Between July and December 2021, social media platforms disclosed that thousands of items had been removed or blocked because of complaints originating from Germany. In this period, Facebook reported 1,0825 blocked or removed items, Twitter reported that it blocked or removed 75,822 items during the same period,6 and Google disclosed 43,847 items were blocked or removed on YouTube.7 Likewise, TikTok blocked or removed 27,436 items.8 Other than Facebook and TikTok, the other companies did not differentiate how many items were removed due to NetzDG in their reports.
Separately, the government also issues content removal requests. According to Google’s Transparency Report, the company received 260 takedown requests from government agencies and courts in the first half of 2021 and removed 41.2 percent of requested content. Google received 302 takedown requests in the second half of 2021, removing 64.5 percent of request content. The most common cause for requests was defamation. Meanwhile, Twitter received 47 content removal requests from German authorities and courts in the first half of 2021, complying with 72 percent of those requests, and 17 requests in the second half of 2021, complying with 76 percent.9 In 2021, Facebook restricted 603 items for violating the Youth Protection Law, 14,461 items related to misinformation, 13 items related to hate speech, 32 items in response to court orders, and 21 items for violating local law based on requests originating from Germany.10
Under a 2014 CJEU decision on the “right to be forgotten” (RTBF),11 Google and other search engines are required to remove certain search results if they infringe on the privacy rights of a person and that person formally requests the action (see B3).
From the date of the ruling to the end of May 2021, Google had assessed some 1,296,521 requests to delist search results across the EU, affecting more than 5 million URLs, with 213,157 requests coming from Germany alone.12 For Germany, nearly 60 percent of the URLs requested removed during this report’s coverage period resulted in a delisting by Google. Between July and December 2021, Microsoft received 772 RTBF delisting requests, covering 2,229 URLs.13 The company delisted 39 percent of those URLs.
Throughout 2021, the government called for content to be removed from the encrypted messaging app Telegram, which has been historically reluctant to moderate content. In efforts to ban calls for violence, the federal police issued takedown requests. Telegram responded by taking down 64 channels for violations of local laws for the first time in Germany. These included channels by a well-known German conspiracy theorist.14 In January 2022, the minister of the interior threatened to request that Apple and Google remove Telegram from app stores, but shortly after said that her threat was only meant to pressure Telegram. Meanwhile, the Federal Police began to identify suspects who put out hate speech or violent threats via the platform.15
German copyright law has been criticized repeatedly for its use to hinder the publishing of sensitive information on topics of public interest, especially as many online platforms automatically remove content that reportedly breach copyright law so as to avoid lawsuits. In May 2021, the Cologne Higher Regional Court ruled that nonprofit platform FragDenStaat (Ask the State), which was sued in December 2019 by the Federal Institute for Risk Assessment (BfR) for publishing a government-issued report on health risks caused by the herbicide glyphosate, had lawfully published the report under the freedom to quote and freedom to report.16
In June 2021, the EU Copyright Directive was transposed into German law. The COVID-19 pandemic has amplified the public and political debate on copyright law.17 Education and cultural institutions, as well as the Bundesrat, have criticized the law for restricting digital access to knowledge and cultural participation.18
In December 2021, a court sentenced eight defendants, who stood trial for running the CyberBunker data center, a “bulletproof hosting” operation that was housed in a Cold War–era military bunker, to prison time ranging from two years and four months to five years and nine months.19 The defendants were found guilty of forming and participating in a criminal organization but were acquitted of aiding and abetting crimes in nearly 250,000 cases because they provided hosting services to websites conducting illegal activity. The verdict set a legal milestone that could make the operation of data centers that host illegal platforms punishable.20 A criminal code amendment proposed by the Federal Ministry of Justice and Consumer Protection (BMJV) in February 2021, criminalizing the provision of server infrastructure for illegal online marketplaces, was included as a separate paragraph to the criminal law after revisions by the Bundestag. Providers of online marketplaces looking to promote criminal activities can face several years of jail according to the new law (see C2).21
In March 2022, German police conducted raids on the homes of individuals who had posted hateful messages aimed at politicians during the 2021 federal elections and forced them to delete those messages (see C3).22
In March 2022, major online media platforms, including Facebook, TikTok,23 Twitter,24 and YouTube,25 restricted access to RT and Sputnik across the EU in response to an order from the European Union (see B1).
- 1William Echikson and Olivia Knodt, Germany’s NetzDG: A key test for combatting online hate, CEPS, No. 2018/09, https://web.archive.org/web/20181122193504/https://www.ceps.eu/system/f….
- 2Tomas Rundl, “Studie zeigt Schwächen bei Gesetz gegen Hassrede auf [Study reveals weaknesses in law against hate speech],“ Netzpolitik, March 24, 2021, https://netzpolitik.org/2021/netzwerkdurchsetzungsgesetz-studie-zeigt-s….
- 3Tomas Rundl, “Twitters Beschwerde-System funktioniert am besten über die Presse [Twitter’s complaint system works best through the press],“ Netzpolitik May 5, 2020, https://netzpolitik.org/2020/twitters-beschwerde-system-funktioniert-am… Also see: “NetzDG: Twitter sperrt Account des Satiremagazins Titanic wg. Beatrix von Storch – und löst Zensur-Debatte aus [Social Network Enforcement Law: Twitter blocks account of satire magazine Titanic because of Beatrix von Storch – and triggers debate on censorship],” Meedia, January 3, 2018, https://meedia.de/2018/01/03/netzdg-twitter-sperrt-account-des-satirema….
- 4Markus Reuter, “Moderation nach Gutsherrenart: Wie Twitter Accounts ohne Einordnung des Kontexts sperrt [Moderation in an autocratic manner: How Twitter blocks accounts without regard to context],” Netzpolitik, January 15, 2018, https://netzpolitik.org/2018/moderation-nach-gutsherrenart-wie-twitter-…
- 5Facebook, “NetzDG Transparency Report,” p. 12, Last updated January 2022, https://about.fb.com/de/wp-content/uploads/sites/10/2022/01/NetzDG-EN.p….
- 6Twitter, "Netzdurchsetzungsgesetzbericht Juli – Dezember 2021,” h https://transparency.twitter.com/content/dam/transparency-twitter/netzd….
- 7Google Transparency Report, “Removals under the Network Enforcement Law,” https://transparencyreport.google.com/netzdg/youtube?hl=en_GB.
- 8Tik Tok, “Netz-DG-Transparenzbericht [Enforcement Act Transparency Report],” accessed September 2022, https://www.tiktok.com/safety/resources/netzdg-jul-dec-2020?lang=de-DE&…
- 9Twitter Transparency Report, “Removal Requests,” accessed September 2022, https://transparency.twitter.com/en/reports/removal-requests.html#2021-….
- 10Facebook Transparency Report, “Content Restrictions: Germany,” accessed September 2022, https://transparency.facebook.com/content-restrictions/country/DE
- 11“Google Spain SL and Google Inc. v Agencia Española de Protección de Datos (AEPD) and Mario Costeja González, Request for a preliminary ruling from the Audiencia Nacional, Case C‑131/12,” European Court of Justice, May 13, 2014, http://curia.europa.eu/juris/liste.jsf?num=C-131/12
- 12Google Transparency Report, “Requests to delist content under European privacy law,” last viewed on July, 13, 2022 https://transparencyreport.google.com/eu-privacy/overview?delisted_urls…:.
- 13Microsoft, “Content Removal Requests Report,” accessed July 2022, https://www.microsoft.com/en-us/corporate-responsibility/crrr.
- 14Markus Reuter, “Telegram sperrt erstmals Kanäle in Deutschland wegen ‘lokalen Gesetzesverstößen‘[For the first time, Telegram bans channels in Germany because of local law infringements],“ Netzpolitik, February 2, 2022, https://netzpolitik.org/2022/nach-gespraechen-mit-bundesregierung-teleg….
- 15“Faeser distanziert sich von eigener Abschaltdrohung [Feaser distanced herself from her own threat], Spiegel Online, January 27, 2022, https://www.spiegel.de/netzwelt/netzpolitik/telegram-faeser-distanziert….
- 16Frag den Staat, “Urteil des OLG Köln zum "Zensurheberrecht", 6 U 146/20 [Ruling of the Cologne Higher Regional Court on "censorship copyright," 6 U 146/20],” May 2021, https://fragdenstaat.de/dokumente/9667-olk-koeln-urteil-zensurheberrech….
- 17Julia Reda, “Edit Policy: Warum die Länder praktikablere Regeln zum Urheberrecht fordern [Edit policy: Why country states are calling for more workable copyright rules],“ Heise online, March 29, 2021, https://www.heise.de/meinung/Edit-Policy-Warum-die-Laender-praktikabler….
- 18Bundesrat, “Stellungnahme des Bundesrates zum Entwurf eines Gesetzes zur Anpassung des Urheberrechts an die Erfordernisse des digitalen Binnenmarktes [on the draft law on the adaptation of copyright law to the requirements of the digital single market],” March 26, 2021, https://www.bundesrat.de/SharedDocs/drucksachen/2021/0101-0200/142-21(B…. Also see: BMJV, “Entwurf eines Zweiten Gesetzes zur Anpassung des Urheberrechts an die Erfordernisse des digitalen Binnenmarktes [Draft of a second law for adaptation of copyright law to the requirements of the digital single market],” June 24, 2020, ,https://www.bmjv.de/SharedDocs/Gesetzgebungsverfahren/Dokumente/DiskE_I…
- 19Spiegel Online,“Knapp sechs Jahre Haft für Betreiber von Cyberbunker [Almost six years of jail for Cyberbunker provider],“ Spiegel Online, December 13, 2021, https://www.spiegel.de/netzwelt/web/cyberbunker-knapp-sechs-jahre-haft-…
- 20SWR Aktuell, “Cyberbunker Verfahren [cyberbunker case],” last updated February 1, 2021, https://www.swr.de/swraktuell/rheinland-pfalz/trier/cyberbunker-prozess…
- 21Friedhelm Greis,“Kein Strafbestand für Provider illegaler Marktplätze [No criminal offense for providers of illegal marketplaces],“ Golem, June 25, 2021, https://www.golem.de/news/darknet-gesetz-kein-straftatbestand-fuer-prov…
- 22Mitteldeutscher Rundfunk, “Hass-Nachrichten gegen Politiker: Polizei durchsucht Gebäude in Sachsen und Thüringen [Hate posts against politicians: police sweep buildings in Saxony and Thuringia],“ March 22, 2022, https://www.mdr.de/nachrichten/deutschland/hass-im-netz-facebook-social….
- 23Shannon Bond, “Facebook and TikTok block Russian state media in Europe,” WNYC, February 28, 2022, https://www.npr.org/2022/02/28/1083633239/facebook-and-tiktok-block-rus….
- 24Natasha Loma, “Twitter’s EU-only geoblocks of Russia Today off to a shaky start,” TechCrunch, March 3, 2022, https://techcrunch.com/2022/03/03/twitters-eu-only-geoblocks-of-russia-….
- 25Giedre Peseckyte, “YouTube blocks access to Russian state-controlled media amid EU states’ call for action,” Euractiv, March 1, 2022, https://www.euractiv.com/section/digital/news/youtube-blocks-access-to-….
Do restrictions on the internet and digital content lack transparency, proportionality to the stated aims, or an independent appeals process? | 3.003 4.004 |
Restrictions on online content in Germany generally meet minimum requirements for transparency, proportionality, and independent appeal.
NetzDG, which was approved in June 20171 and went into effect in January 2018, obliges social media platforms with more than 2 million registered users in the country to investigate and delete flagged content shortly after being reported, or otherwise face hefty fines (see B6).2 If the flagged content is “obviously illegal,” the company must block or remove it within 24 hours; if not obviously illegal, the content must be investigated and blocked or removed within seven days. Under NetzDG, illegality is defined in relation to 22 articles in Germany’s criminal code (see C2).3 After making a decision to delete or preserve flagged content, the company has to inform both the complainant and the user who uploaded the content. If it fails to meet any of those requirements, the company could face fines of up to €50 million ($58.5 million) (see B6).4
Additionally, in March 2021, lawmakers passed amendments to NetzDG that add additional transparency requirements for social media platforms and expands the mandate of NetzDG to include video-sharing services to align with the EU Audiovisual Media Services Directive. The amendments, which went into effect in June 2021, also provide users with an avenue to appeal content-removal decisions though the appeal must be filed within two weeks.5
A new law, which came into effect in June 2021, amends NetzDG by requiring companies to share the personal information of users reported for hate speech or illegal content with the BKA (see C6). In March 2022, the Cologne Administrative Court ruled that measures in the amendments were not in line with EU legislation.6
The European Union’s Digital Services Act (DSA), which the European Parliament (EP) adopted in July 2022,7 seeks to harmonize member states’ legislation regarding hate speech. Yet NetzDG, which has a broader definition for illegal content, compels online platforms to remove a wider swath of content than the DSA. Politicians and children’s rights groups have advocated for the continued enforcement of the stricter NetzDG measurements even after the DSA passed.8 For example, the nongovernmental organization (NGO) National Coalition Germany, a network of children’s rights groups, put forward a letter demanding that the stricter German youth protection laws should be allowed to remain in place.9
In March 2021, major internet providers operating in Germany and associations of companies in the entertainment industry formed the Clearing House for Copyright on the Internet (CUII), a joint initiative to initiate domain name system (DNS) blocks against “structurally copyright-infringing” websites.10 While blocking requests were previously considered by judges, the BNetzA now assesses CUII recommendations and determines whether the blocking violates the principle of net neutrality. The new policy has elicited criticism from politicians and activists.11 The Federal Cartel Office (BKartA) did not object to the new initiative, though it is monitoring the development of the practice.12 Critics question the BNetzA’s suitability in this process, since the agency is responsible for regulating telecommunications networks to ensure fair competition and net neutrality rather than assessing fundamental rights regarding copyright.13
Since its inception, the CUII has been criticized for potential antitrust violations and the limits it could place on freedom of communication.14 There have also been concerns about normalizing this type of instrument and the initialization of the DNS4EU project, which will also operate with filter lists and network blocks across the European Union, demonstrates that similar measures could take effect at the European level.15
In April 2021, the EP adopted a regulation aimed at “tackling the dissemination of terrorist content online” which, among other things, would require platforms to delete content within one hour of receiving a removal order from authorities.16 Platforms that routinely fail to do so could be fined 4 percent of their overall annual revenue (see B6). Critics have voiced concerns that ambiguity surrounding the definition of “terrorist content” and the short timeline for removing such content will lead companies to “remove speech first and ask questions later,” possibly through automatic filters.17 The resolution entered into force in June 2021 and became applicable as of June 2022.18
Issues related to copyright law have figured prominently in discussions around internet freedom in Germany. The EU Directive on Copyright in the Digital Single Market, which the Council of the EU approved in April 201919 and Germany enacted in June 2021 (see B2), imposes a so-called link tax, which grants online publishers the right to charge aggregators like Google News for excerpting proprietary content, such as news articles (see B6).20
In May 2021, the federal and state parliaments passed laws amending the Copyright Act and the Collecting Societies Act to align with the new EU directive (see B2). The amendments require companies with large amounts of user-generated content to use “upload filters,”21 which will preemptively block copyright-infringing online content.22 Although the law came into effect in June 2021, the implementation of upload filters could still be invalidated because the advocate general of the ECJ recently argued against the liability of platform operators and the ECJ had not yet reached a judgment on the legality of Article 17 of the Copyright Act as of the end of the coverage period.23
Companies can be held liable for illegal content under the Telemedia Act (TMG). The law distinguishes between full liability for one’s own content and limited “breach of duty of care” (störerhaftung) for service providers and host providers of third-party content.24 The courts have held that if the business model of a service aims to facilitate copyright infringement, the company is considered less worthy of immunity from intermediary liability.25 As a consequence, hosting providers are required to monitor their own servers and search for copyright-protected content as soon as they have been notified of a possible violation.26
While ISPs are not required to proactively monitor the information of third parties on their servers, they become legally responsible as soon as they gain knowledge of violations or violate due diligence requirements.27
In 2015, the BGH ruled that the blocking of a website may be ordered as a last resort if it is the only means for a copyright holder to effectively end rights infringement on that website.28 In such cases, the owner of the copyright may ask an ISP to block the website in question. If the provider refuses, a court can intervene.
The protection of minors constitutes an important legal basis for extant regulation of online content.29 Youth protection on the internet is principally addressed at the state level through the Interstate Treaty on the Protection of Human Dignity and the Protection of Minors in Broadcasting and Telemedia (JMStV), which bans content, including the glorification of violence and sedition, and provides a framework for age restrictions on content without specifying measures to implement them.30 A controversial provision of the JMStV reflects the regulation of broadcast media: adult-only content on the internet, including pornography, may only be made available after verifying the age of the user.31 The JMStV enables the blocking of content if other actions against offenders fail and if such blocking is expected to be effective. In late 2021, the Commission for Youth Media Protection ordered five internet providers to block popular pornography website xHamster.com, as it failed to provide an age verification process. All providers have announced they plan to audit this decision or have it examined in court.32 The media regulators labelled the effort a “failure” because the porn site was moved to similar URLs. Unlike copyright law in Germany, youth protection law requires individual URLs to be blocked separately, even if they contain identical content to URLs that are already blocked.33
- 1Markus Reuter, “Bundestag beschließt Netzwerkdurchsetzungsgesetz [Federal parliament enacts Social Network Enforcement Law],“ Netzpolitik, June 30, 2017, https://netzpolitik.org/2017/bundestag-beschliesst-netzwerkdurchsetzung…
- 2"Netzwerkdurchsetzungsgesetz vom 1. September 2017 (BGBl. I S. 3352)," § 4 Abs. 2 S. 2, https://www.gesetze-im-internet.de/netzdg/BJNR335210017.html in connection with "Gesetz über Ordnungswidrigkeiten in der Fassung der Bekanntmachung vom 19. Februar 1987 (BGBl. I S. 602), § 30 Abs. 2 S.OWiG, das zuletzt durch Artikel 5 des Gesetzes vom 9. Dezember 2019 (BGBl. I S. 2146) geändert worden ist," https://www.gesetze-im-internet.de/owig_1968/BJNR004810968.html
- 3Network Enforcement Act of September 1, 2017 (Netzdurchsetzunggesetz, NetzDG), Federal Law Gazette I p. 3352, https://germanlawarchive.iuscomp.org/?p=1245
- 4"Netzwerkdurchsetzungsgesetz vom 1. September 2017 (BGBl. I S. 3352)," § 4 Abs. 2 S. 2, https://www.gesetze-im-internet.de/netzdg/BJNR335210017.html in connection with "Gesetz über Ordnungswidrigkeiten in der Fassung der Bekanntmachung vom 19. Februar 1987 (BGBl. I S. 602), § 30 Abs. 2 S.OWiG, das zuletzt durch Artikel 5 des Gesetzes vom 9. Dezember 2019 (BGBl. I S. 2146) geändert worden ist," https://www.gesetze-im-internet.de/owig_1968/BJNR004810968.html
- 5Library of Congress, “Germany: Network Enforcement Act Amended to Better Fight Online Hate Speech,” 2021, https://www.loc.gov/item/global-legal-monitor/2021-07-06/germany-networ…
- 6Anna Biselli, “Netzpolitik.org, “NetzDG-Meldepflicht verstößt gegen Unionsrecht [NetzDG-reporting obligations infringe EU law],“ Netzpolitik, March 1, 2022, https://netzpolitik.org/2022/verwaltungsgericht-koeln-netzdg-meldepflic….
- 7European Parliament Legislative Observatory, "European Parliament legislative resolution of 5 July 2022 on the proposal for a regulation of the European Parliament and of the Council on a Single Market For Digital Services (Digital Services Act) and amending Directive 2000/31/EC (COM(2020)0825 – C9-0418/2020 – 2020/0361(COD)),” July 5, 2022, https://oeil.secure.europarl.europa.eu/oeil/popups/ficheprocedure.do?la…).
- 8Oliver Nyon, “Deutschland fordert Nachschärfung beim Digital Service Act [Germany demands tougher requirements fort he Digital Services Act], Euractiv, updates July 27, 2021, https://www.euractiv.de/section/innovation/news/deutschland-fordert-nac…
- 9Netzwerk Kinderrechte,“Offener Brief: Kinderrechte und das Gesetz über Digitale Dienste [Open letter: Children‘s rights and the Digital Services Act], March 23, 2022, https://netzwerk-kinderrechte.de/2022/03/23/offener-brief-kinderrechte-….
- 10Bundesnetzagentur, “Clearingstelle Urheberrecht im Internet veranlasst Sperrung einer Streaming-Website [Internet Copyright Clearing House initiates blocking of a streaming website],” March 11, 2021, https://www.bundesnetzagentur.de/SharedDocs/Pressemitteilungen/DE/2021/…
- 11Julia Reda, “Edit Policy: Die CUII-Initiative – private Netzsperren ohne Gerichtsbeschluss [Edit Policy: The CUII initiative - private blocking without a court order],“ Heise online, March 15, 2021, https://www.heise.de/meinung/Edit-Policy-Die-CUII-Initiative-private-Ne…
- 12“Bundeskartellamt, „Bundeskartellamt hat keine Einwände gegen Start der Clearingstelle Urheberrecht im Internet [Federal Cartel Office has no objections to launch of copyright clearing house on the Internet],“ March 11, 2021, https://www.bundeskartellamt.de/SharedDocs/Publikation/DE/Pressemitteil…
- 13Helmut Bünder and Corinna Budras “Kommt jetzt das Ende der illegalen Streamingseiten? [Is Is the end of illegal streaming sites coming?],” March 10, 2021, https://www.faz.net/aktuell/wirtschaft/streaming-neue-clearingstelle-sp…
- 14Julia Reda, “Edit Policy: Die CUII-Initiative – private Netzsperren ohne Gerichtsbeschluss [Edit Policy: The CUII initiative - private blocking without a court order],“ Heise online, March 15, 2021, https://www.heise.de/meinung/Edit-Policy-Die-CUII-Initiative-private-Ne… see: Felix Reda, “Kartellrechtliche Bedenken gegen Internet-Clearingstelle CUII [Antitrust concerns against internet clearinghouse CUII]”, Netzpolitik.org, May 25, 2021, https://netzpolitik.org/2021/edit-policy-kartellrechtliche-bedenken-geg….
- 15Markus Reuter, “EU will eigenen DNS-Server mit Filterlisten und Netzsperren [EU wants its own DNS server with filter lists and network blocking]“, Netzpolitik.org, January 24, 2022, https://netzpolitik.org/2022/dns4eu-eu-will-eigenen-dns-server-mit-filt….
- 16Natasha Lomas, “EU adopts rules on one-hour takedowns for terrorist content,” Techcrunch, April 29, 2021, https://techcrunch.com/2021/04/29/eu-adopts-rules-on-one-hour-takedowns…
- 17Faiza Patel, “EU ‘Terrorist Content’ Proposal Sets Dire Example for Free Speech Online,“ Just Security, March 5, 2019, https://www.justsecurity.org/62857/eu-terrorist-content-proposal-sets-d…
- 18European Commission, “Security Union: EU rules on removing terrorist content online enter into force,” June 7, 2021, https://ec.europa.eu/commission/presscorner/detail/en/mex_21_2883
- 19Marcello Rossi, “What the EU’s copyright overhaul means — and what might change for big tech,” Nieman Lab, April 22, 2019, https://www.niemanlab.org/2019/04/what-the-eus-copyright-overhaul-means…
- 20Marcello Rossi, “What the EU’s copyright overhaul means — and what might change for big tech,” Nieman Lab, April 22, 2019, https://www.niemanlab.org/2019/04/what-the-eus-copyright-overhaul-means…
- 21“Copyright Reform: Adapting Copyright Law to the Requirements of the Digital Internal Market,” Friedrich Graf von Westphalen & Partner mbB, June 21, 2021, https://www.fgvw.de/en/news/copyright-reform-adapting-copyright-law-to-…
- 22Markus Beckedahl, ”Chance verpasst: Dieses Urheberrecht bleibt in der Vergangenheit stecken [A missed opportunity: This copyright law remains stuck in the past],” Netzpolitik, March 26, 2019 https://netzpolitik.org/2019/chance-verpasst-dieses-urheberrecht-bleibt…
- 23Henry Steinhau, “EuGH: Plattformen haften nicht direkt für Urheberrechtsverletzungen [ECJ: Platforms are not directly liable for copyright infringements],” iRights.info, July 20, 2020, https://irights.info/artikel/eugh-plattformen-haften-nicht-direkt-fuer-….
- 24In particular: Part 3, §§ 7-10 TMG: liability for own content (§ 7, Abs. 1 TMG); limited liability for access providers (§§ 8, 9 TMG) and host providers (§ 10 TMG).
- 25BGH [Federal Court of Justice], judgment of 15 August, 2013, Az. I ZR 80/12, https://www.telemedicus.info/urteile/Urheberrecht/1413-BGH-Az-I-ZR-8012…
- 26Thomas Stadler, “BGH erweitert Prüfpflichten von Filehostern wie Rapidshare [Federal Court of Justice extends monitoring duties for host providers such as Rapidshare],” Internet-Law, Blog, September 4, 2013, http://www.internet-law.de/2013/09/bgh-erweitert-pruefpflichten-von-fil…
- 27BGH [Federal Court of Justice], judgment of March 27, 2012, Az. VI ZR 144/11, http://openjur.de/u/405723.html
- 28Constanze Kurz, “BGH-Entscheidung zu Netzsperren: Die nichtsnutzige digitale Sichtschutzpappe ist zurück [Federal Court of Justice decision on blocking of websites: the useless digital screen wall is back],“ Netzpolitik, November 26, 2015, https://netzpolitik.org/2015/bgh-entscheidung-zu-netzsperren-die-nichts…
- 29For the legal framework regulating media protection of minors in particular, see: “Jugendschutzgesetz [Law for the protection of children and youth],” July 23, 2002, https://www.gesetze-im-internet.de/juschg/BJNR273000002.html; and “Staatsvertrag über den Schutz der Menschenwürde und den Jugendschutz in Rundfunk und Telemedien [Interstate treaty for the protection of human dignity and the protection of minors in broadcasting and telemedia],” last amended October 1, 2016, https://perma.cc/DBM8-L53T/.
- 30“Strafgesetzbuch – StGB [German Criminal Code],” Cf. the respective §§ 130, 131, http://www.gesetze-im-internet.de/englisch_stgb/englisch_stgb.html
- 31“Staatsvertrag über den Schutz der Menschenwürde und den Jugendschutz in Rundfunk und Telemedien [Interstate treaty for the protection of human dignity and the protection of minors in broadcasting and telemedia],” §5, abs. 3, https://perma.cc/DBM8-L53T/.
- 32Sebastian Meineck, “Sperre für Pornoseite xHamster rückt näher [xHamster ban approaches]”, Netzpolitik, March 4, 2022, https://netzpolitik.org/2022/medienaufsicht-sperre-fuer-pornoseite-xham….
- 33dpa, “xHamster: NRW-Medienaufsicht beklagt ungleiche Waffen im Kampf um Jugendschutz [xHamster: NRW Media Authority complains about unequal weapons in the fight for youth protection]“, Heise Online, 27. May 2022, https://www.heise.de/news/xHamster-NRW-Medienaufsicht-beklagt-ungleiche….
Do online journalists, commentators, and ordinary users practice self-censorship? | 4.004 4.004 |
To date, self-censorship online has not been a significant or well-documented problem in Germany. Still, there are some rules reflected in the publishing principles of the German press that may constrain some journalists’ online speech. This self-binding code of ethics forms the basis for the evaluation of possible complaints from the public. It includes 16 provisions and is centered on the protection of human dignity.1 In May 2020, the new Interstate Media Treaty (Medienstaatsvertrag, or MStV) introduced an obligation for self-regulatory institutions to penalize the repeated publication of disinformation (see B6), which could lead to self-censorship.2
NetzDG has been criticized for leading to a potential chilling effect on content posted online (see B3).3 There is, however, a lack of evidence that these restrictions have led to significant levels of self-censorship.
- 1Presserat [Press Council], “Pressekodex [press code],” version dated March 13, 2013, https://web.archive.org/web/20140302010038/http://www.presserat.de/pres…
- 2Frederik Ferreau, “Liebesgrüße von der Medienaufsicht,“ Legal Tribune Online, February 25, 2021, https://www.lto.de/recht/hintergruende/h/online-medien-aufsicht-hinweis…
- 3Deutscher Journalisten-Verband e.V., “Stellungnahme des Deutschen Journalisten-Verbandes e.V. zum Referentenentwurf des Bundesjustizministeriums zum Gesetz zur Bekämpfung des Rechtsextremismus und der Hasskriminalität, [Position statement by the German Journalists Association on the Ref-E BMJV on the law to combat right-wing extremism and hate crime],“ p. 1, January 22, 2020, https://www.bmjv.de/SharedDocs/Gesetzgebungsverfahren/Stellungnahmen/20…
Are online sources of information controlled or manipulated by the government or other powerful actors to advance a particular political interest? | 3.003 4.004 |
Germany’s online information landscape has witnessed content manipulation, which in some cases has been linked to the far right.
Russian disinformation campaigns targeted Germany after the Kremlin’s brutal invasion of Ukraine. For example, a September 2022 Meta report noted that a Russian influence operation used “false media sites” mimicking those of prominent publications in the European Union, including the German publications Der Spiegel, T-Online, and Die Welt, to target users in Germany and the European Union with Russian propaganda. The campaign spent around $100,000 on advertisements and sponsored pages that spread narratives about the potential energy crisis in Europe and claimed that war crimes committed by the Russian military in Ukraine, which have been documented by rights groups, did not happen. Ultimately, the network had little influence within the European Union, and in some cases, the German-language pages were clearly not run by German users.1
In March 2021, German news outlet Netzpolitik reported that the Poland-based website Our Central Europe, which disseminated conspiracies about climate change, COVID-19, and refugees in Germany, has links to the Mecklenburg–Western Pomerania wing of the right-wing populist Alternative for Germany (AfD). According to the report, the site uses text seen in AfD press releases and has faced problems placing advertisements on Facebook for violating the company’s policy on political advertising. The site is formally operated by London-based New Network Communications, an apparent front company, and has connections with a former employee of the Freedom Party of Austria (FPÖ), a right-wing Austrian political party.2
While there were concerns about the proliferation of disinformation leading up to the September 2021 federal elections, Paris-based think tank Institut Montaigne found that “there was no singular, big disinformation narrative.”3 Previous concerns about electoral disinformation prompted legislators to push for controversial legal solutions with potential implications for freedom of expression online. The MStV (see B6) obliges operators to mark social bots, if they use them, but definitions and labelling requirements are often imprecise, and the policy could impact human accounts.4
- 1Mark Scott, “Grotesque’ Russian disinfo campaign mimics Western news websites to sow dissent,” Politico, September 27, 2022, https://www.politico.eu/article/russia-influence-ukraine-fake-news/.
- 2Daniel Laufer and Alexander Fanta, “‘Vertrauen Sie Profis!’ [‘Trust the professionals!’]," Netzpolitik, March 23, 2021, https://netzpolitik.org/2021/desinformation-aus-oesterreich-vertrauen-s…
- 3Julian Jaursch, “Disinformation in the 2021 German Federal Elections: What Did and Did Not Occur,” Institut Montaigne, October 5, 2021, https://www.institutmontaigne.org/en/analysis/disinformation-2021-germa….
- 4Philip Sümmermann, “MStV – Pflichten für Telemedien: Journalistische Sorgfalt und Social Bots,“ October 22, 2020, MStV – Pflichten für Telemedien: Journalistische Sorgfalt und Social Bots,“ October 22, 2020, https://www.telemedicus.info/neue-pflichten-fuer-telemedien-online-pres….
Are there economic or regulatory constraints that negatively affect users’ ability to publish content online? | 2.002 3.003 |
While individual internet users face few economic or regulatory obstacles to publishing content online, German law exposes companies such as social media platforms or hosting providers to substantial financial penalties.
NetzDG and the EU regulation regarding dissemination of terrorist content online (see B3), which was adopted in March 2021,1 could make it more difficult for new companies to enter the German market. NetzDG imposes hefty fines on social media companies that fail to comply with content-removal and reporting requirements. Moreover, the law has forced social media companies to set up expensive internal systems to comply with its requirements. Facebook, Google, Twitter, and TikTok collectively employ thousands of people to review complaints submitted under NetzDG.
Under the MStV, which came into effect in November 2020, media outlets that are not part of any self-regulatory bodies are now subject to direct supervision by state media institutions and can face penalties for refusing to comply with the measure or for the repeated distribution of disinformation. The MStV also introduced a license requirement for those who create online video content that consistently reaches at least 20,000 viewers. The MStV expands the scope of such obligations to almost any commercial form of publication. Observers have criticized the unequal treatment of new self-regulatory bodies compared to the established German Press Council, as well as the involvement of media institutions as supervisory authorities.
The MStV also imposes algorithmic transparency and nondiscrimination requirements on major online platforms that aggregate third-party content, such as those operated by Google, Facebook, and Apple.2 A consortium of representatives from the press and digital media have criticized the MStV for taking an anti-consumer stance and for limiting user autonomy.3
In April 2017, the federal parliament incorporated EU rules on net neutrality into domestic law.4 However, observers remarked that several plans from ISPs and mobile service providers, such as Deutsche Telekom’s Stream On, Vodafone’s Vodafone Pass, and O2’s Unlimited plan, violate strict net neutrality by favoring certain services, including video-streaming services.5 BNetzA subsequently prohibited parts of Stream On for breaching net neutrality principles.6 Fines for violating net neutrality laws can reach a maximum of €500,000 ($550,800), relatively low compared to other European states.7 After a summary proceeding in the regional court of North Rhein-Westphalia, Deutsche Telekom was forced to implement the official requirements in August 2019. The lawsuit was moved to the ECJ, which ruled in September 2021 that the plans offered by Vodafone and Deutsche Telekom were unlawful.8
The governing federal coalition has reiterated its support for ancillary copyright for publishers (Leistungsschutzrecht für Presseverleger), in force since 2013.9 The regulation allows publishers to monetize excerpts that search engines display as part of their search results.10 Some fear this infringes upon constitutionally protected rights to freedom of expression and information.11 In order to limit monetization, search engines began excluding results leading to the websites of publishers that monetized their links or displayed links without the corresponding excerpts.12 The EU Copyright Directive, which was approved in April 2019 and implemented into national law in June 2021, includes ancillary copyright for publishers (see B3).13
At the beginning of February 2022, prior to the EU-wide ban of RT and Sputnik (see B1), RT DE (previously RT Deutsch), a Russian state–owned website that regularly spreads disinformation, was banned from broadcasting by the Commission for Licensing and Supervision for lack of a media law license in Germany. However, the station has no prospect of obtaining the necessary broadcasting license as the MStV stipulates that licenses cannot be issued to public and state bodies in Germany and abroad.14
- 1EU Council, “Terroristische Online-Inhalte: Rat verabschiedet neue Vorschriften [Terrorist online content: Council adopts new rules],” March 16, 2021, https://www.consilium.europa.eu/de/press/press-releases/2021/03/16/terr…
- 2Algorithm Watch, “Germany’s new Media Treaty demands that platforms explain algorithms and stop discriminating. Can it deliver?” March 9, 2020, Mackenzie Nelson and Julian Jarusch, https://algorithmwatch.org/en/new-media-treaty-germany/; Daniel Laufer, “Neue Spielregeln für Streamer, Google und Falschmeldungen [New rules for streamers, Google and fake news],” Netzpolitik, December 6, 2019, https://netzpolitik.org/2019/neue-spielregeln-fuer-streamer-google-und-…
- 3Stefan Krempl, “Internetfreiheit ade: Harte Kritik am geplanten Medienstaatsvertrag [Bye bye internet freedom: Media State Treaty is facing harsh criticism],“ Heise Online, August 1, 2019, https://www.heise.de/newsticker/meldung/Internetfreiheit-ade-Harte-Krit…
- 4Deutscher Bundestag, “Bundestag beschließt Netzneutralität im Datenverkehr [Federal parliament enacts net neutrality in data traffic],“ April 27, 2017, https://www.bundestag.de/dokumente/textarchiv/2017/kw17-de-telekommunik…
- 5Mirjam Hauck and Helmut Martin-Jung, “Auch in Deutschland ist die Netzneutralität durchlöchert [In Germany, too, net neutrality has holes],“ Süddeutsche Zeitung, December 15, 2017, https://www.sueddeutsche.de/digital/netzneutralitaet-in-deutschland-auc…; Thomas Rudl, “Netzneutralität: o2 untersagt freie Endgerätewahl, Bundesnetzagentur prüft [Net neutrality: o2 bans freedom of choice for terminal devices, BNetzA is scrutinizing],“ Netzpolitik, August 30, 2018, https://netzpolitik.org/2018/netzneutralitaet-o2-untersagt-freie-endger…
- 6Markus Reuter, “Netzneutralität: Bundesnetzagentur untersagt Teile von Stream On [Net neutrality: Federal Network Agency prohibits parts of Stream On],“ Netzpolitik, December 15, 2017, https://netzpolitik.org/2017/netzneutralitaet-bundesnetzagentur-untersa…
- 7Thomas Lohninger, “Justizministerium blockiert bessere Durchsetzung von Netzneutralitätsregeln [Ministry of justice blocks better enforcement of net neutrality rules],“ Netzpolitik, May 22, 2019, https://netzpolitik.org/2019/katarina-barley-stellt-sich-gegen-netzneut…
- 8Court of Justice of the European Union, “’Zero tariff’ options are contrary to the regulation on open internet access,” September 2, 2021, https://curia.europa.eu/jcms/upload/docs/application/pdf/2021-09/cp2101….
- 9Leonhard Dobusch, “Urheberrecht im Koalitionsvertrag: Zwischen ‘modernen Nutzungsformen‘ und einem EU-Leistungsschutzrecht [Copyright Law in the coalition agreement: Between ‘modern forms of use‘ and a EU ancillary copyright],“ Netzpolitik, February 9, 2018, https://netzpolitik.org/2018/urheberrecht-im-koalitionsvertrag-zwischen…
- 10David Meyer, “Google fighting German plan for linking fee,” CNET, November 27, 2012, https://www.cnet.com/news/google-fighting-german-plan-for-linking-fee/
- 11Philipp Otto, “Kommentar: ein unmögliches Gesetz [Comment: an impossible law],” iRights.info, August 30, 2012, https://irights.info/2012/08/30/kommentar-ein-unmogliches-gesetz/4595
- 12Henry Steinhau, “Leistungsschutzrecht: T-Online und 1&1 verbannen Verlage der VG Media aus ihren Suchergebnissen [Ancillary copyright: T-Online and 1&1 ban VG Media publishers from their search results],“ iRights.info, September 16, 2014, https://irights.info/webschau/leistungsschutzrecht-t-online-und-1und1-v…
- 13“EU einigt sich auf Reform des Urheberrechts [EU agrees on copyright reform],“ Zeit Online, February 13, 2019, https://www.zeit.de/digital/internet/2019-02/urheberrecht-leistungsschu…
- 14Steffen Grimberg, “Warum RT DE gleich doppelt verboten ist [Why RT DE is doubly banned],“ MDR.DE, March 15, 2022, https://www.mdr.de/medien360g/medienpolitik/warum-rt-verboten-ist-100.h…; Andrea Beer, “Russland droht deutschen Medien [Russia threatens German media]“, Tagesschau, January 18, 2022, https://www.tagesschau.de/ausland/asien/rt-de-rundfunklizenz-103.html.
Does the online information landscape lack diversity and reliability? | 4.004 4.004 |
Germany is home to a vibrant internet community and blogosphere. Local and international media outlets and news sources are accessible and represent a diverse range of opinions.
During the COVID-19 pandemic, misinformation about the coronavirus spread through social media platforms and messaging services. A false narrative regarding the effect of the anti-inflammatory drug ibuprofen on COVID-19 patients originated in Germany in March 2020. Although it was debunked by medical officials soon after, it spread across European borders. French health minister Olivier Véran notably warned COVID-19 patients not to use anti-inflammatory drugs including ibuprofen in a March 2020 Twitter post.1
In September 2021, YouTube removed the German version of RT from their site due to disinformation around COVID-19.2
- 1Dr. Meghan McGinty, “Ibuprofen narratives in five European countries during the COVID-19 pandemic,” July 6, 2020,https://misinforeview.hks.harvard.edu/article/ibuprofen-narratives-in-f…
- 2Patrick Gensing and Silvia Stöber,“YouTube sperrt Kanäle von RT Deutsch [Youtube bans RT Deutsch channels], Tagesschau, September 28, 2021, https://www.tagesschau.de/faktenfinder/rtde-youtube-101.html.
Do conditions impede users’ ability to mobilize, form communities, and campaign, particularly on political and social issues? | 6.006 6.006 |
During the coverage period, several civil society initiatives used the internet to conduct advocacy campaigns related to political and social issues in Germany.
Social media has also played a crucial role in the growth of the climate protection movement. The student protest movement Fridays for Future, which originated in Sweden and combines weekly school strikes and marches, largely organizes through social media. In Berlin, protests were held regularly beginning in September 2018.1 The movement has placed the issue on the national political agenda and significantly influenced public perception of the climate crisis.2 Due to the coronavirus outbreak, most protest marches and public interventions in 2020 were cancelled and replaced with multiplatform online campaigns and protests.3
Germany has also witnessed protests against COVID-19-related restrictions and legislation. A group of opponents under the Querdenken (Lateral Thinking) banner formed during the pandemic, largely communicating and mobilizing against pandemic restrictions online.4
Germans also used social media platforms and Telegram groups to organize and pool efforts for refugees and people residing in Ukraine following the Russian invasion of Ukraine.5 Additionally, In 2021, under the hashtag #IchBinHanna (I am Hanna), researchers protested against fixed-term employment contracts and the Temporary Employment Contract Act (Zeitvertragsgesetz). Users described their precarious working conditions and raised their issue in the Bundestag.6
- 1Hannes Soltau, “Entsteht gerade eine ökologische Jugendbewegung?” [Is there an ecological youth movement in formation?],” Der Tagesspiegel, February 22, 2019, https://www.tagesspiegel.de/politik/fridays-for-future-entsteht-gerade-…
- 2Jakob Schlandt, “Für immer mehr Deutsche ist Klimawandel das wichtigste Problem [Climate change is the most important issue for a growing number of Germans],“ Der Tagesspiegel, April 24, 2019, https://www.tagesspiegel.de/wirtschaft/fridays-for-future-zeigt-wirkung…
- 3Ruby Russell and Ajit Niranjan, “Trotz Corona: Fridays for Future mit Klimastreik wieder auf der Straße [Despite Corona: Fridays for Future climate protest back on the street],“ Deutsche Welle, September 25, 2020, https://www.dw.com/de/trotz-corona-fridays-for-future-mit-klimastreik-w…. Also see: “NetzstreikFürsKlima, [NetstrikeForClimate],” Klima Streik, last updated April, 2020, https://www.klima-streik.org; “Einsame Schilder und Online-Klimademo [Lonely signs and online climate protest],” Tagesschau-Online, April 24, 2020, https://www.tagesschau.de/inland/fridaysforfuture-online-101.html
- 4Rüdiger Soldt, “Die Organisationsstruktur hinter den ‘Hygiene-Demos’ [Organizational structures behind the ‘hygiene-protests’],“ Frankfurter Allgemeine, August 4, 2020, https://www.faz.net/aktuell/politik/inland/berlin-die-organisationsstru… See also: Lars Wienand, “Unbekannte werben mit Roboter-Anrufen für "Querdenker"-Demo [Unknown persons advertise with robot calls for "Querdenker" demo],”, t-online, April 4, 2021, https://www.t-online.de/nachrichten/deutschland/id_89778342/-querdenker…
- 5Tagesspiegel, “Wie Berliner den Ukrainern helfen können – und was jetzt sinnvoll ist,“ last updated March 23, 2022, https://www.tagesspiegel.de/berlin/unterstuetzung-gesucht-wie-berliner-…
- 6Stefan Keilmann, “‘Menschen- und wissenschaftsfeindlich‘[Anti-human and anti-scientific],“ Tagesschau, June 24, 2021, https://www.tagesschau.de/inland/gesellschaft/ichbinhanna-101.html; Christoph König, “#IchBinHanna – Machen Zeitverträge die Wissenschaft in Deutschland kaputt? [#IchBinHanna - Are temporary contracts ruining science in Germany?],“,June 24, 2021, SWR2, https://www.swr.de/swr2/wissen/ichbinhanna-kritik-an-zeitvertraegen-in-…
Do the constitution or other laws fail to protect rights such as freedom of expression, access to information, and press freedom, including on the internet, and are they enforced by a judiciary that lacks independence? | 5.005 6.006 |
Article 5 of the Basic Law guarantees freedom of expression and freedom of the media. Judicial bodies operate independently and generally support the protection of basic rights.
Since 2016, the Office of the Federal Commissioner for Data Protection and Freedom of Information (BfDI) has been an independent supreme federal authority.1 Since its founding, the agency has tripled its capacities and enlarged its staff to strengthen the supervision of security authorities.2
The controversial Federal Intelligence Service (BND) Law (see C5), which expands the legal justification for surveillance, has been criticized by journalists demanding improvements, including better protection for reporters abroad as well as their sources. In May 2020, the Federal Constitutional Court (BVerfG) found the law to be unconstitutional, forcing the government to revise the law. Reporters Without Borders (RSF) launched a campaign against the new draft law under the hashtag #NotYourSource, arguing that the vague wording of the revised paragraphs still poses risks to journalists. The amendment was approved by the Bundestag and Bundesrat in March 2021 and went into effect in January 2022.3
- 1“Endlich! Unabhängige Datenschutzbehörde für Deutschland [Finally! Independent data protection agency for Germany],” Datenschutzbeauftragter-info, August 27, 2014, https://www.datenschutzbeauftragter-info.de/endlich-unabhaengige-datens…
- 2Federal Commissioner for Data Protection and Freedom of Information, “The Bundestag strengthens the data protection supervisory authority,“ November 18, 2019 https://www.bfdi.bund.de/EN/Home/Press_Release/2019/28_Budget-BfDI.html…
- 3Bundesministerium der Justiz, “Gesetz über den Bundesnachrichtendienst (BND-Gesetz - BNDG),“ January 1, 2022, https://www.gesetze-im-internet.de/bndg/BJNR029790990.html.
Are there laws that assign criminal penalties or civil liability for online activities, particularly those that are protected under international human rights standards? | 2.002 4.004 |
Score Change: The score declined from a 3 to 2 because of an amendment to the criminal code during the last coverage period that increases punishment for insult.
The German criminal code includes numerous prohibitions that apply to the online realm, such as Section 130, which penalizes calls for violent measures against minority groups and assaults on human dignity.1 This provision is seen as legitimate in the eyes of many Germans, particularly because it is generally applied in the context of Holocaust denial.2 NetzDG defines illegal online content in relation to 22 provisions in the German criminal code, including Section 130. Other provisions prohibit defamation, forming a criminal or terrorist organization, and “using symbols of unconstitutional organizations.”3 In the context of NetzDG, many activists, politicians, and officials have expressed concern that these provisions are too broad. In addition to facilitating content removals, these provisions carry penalties in the form of fines and, in some cases, jail time.
In June 2020, parliament passed an amendment to the criminal code concerning hate speech and threats online, which came into effect in April 2021. The law includes a broader definition of threats and longer prison sentences for insults against other people, which can lead to a sentence of up to two years instead of one year. Additionally, it explicitly criminalizes defamation, insult, and slander against politicians and expanded the scope of the law to include politicians on the municipal level.4
In June 2021, parliament passed a new amendment to the criminal code, criminalizing “operating criminal platforms on the internet” (see B2). Individuals operating these platforms for noncommercial purposes can be sentenced to up to 5 years, while individuals who operate them commercially can be punished with up to 10 years in prison.5
After satirist Jan Böhmermann came under criminal investigation in 2016 for a provocative poem mocking Turkish president Recep Tayyip Erdoğan, the federal parliament abolished a provision of the criminal code that penalizes insulting foreign leaders.6
- 1Bundeszentrale für politische Bildung [Federal agency for political education], “Volksverhetzung [incitement to hatred],“ https://www.bpb.de/nachschlagen/lexika/recht-a-z/23195/volksverhetzung
- 2BVerfG [Federal Constitutional Court], “1 BvR 2150/08 from November 4, 2009,” Absatz-Nr. (1 - 110), https://www.bundesverfassungsgericht.de/entscheidungen/rs20091104_1bvr2…; BVerfG [Federal Constitutional Court], “Press release no. 129/2009 of 17 November 2009: “§ 130.4 of the Criminal Code is compatible with Article 5.1 and 5.2 of the Basic Law,” https://www.bundesverfassungsgericht.de/SharedDocs/Pressemitteilungen/E…
- 3William Echikson and Olivia Knodt, Germany’s NetzDG: A key test for combatting online hate, CEPS, No. 2018/09, https://web.archive.org/web/20181122193504/https://www.ceps.eu/system/f….
- 4Bundesministerium der Justice [Federal Ministry of Justice], “Gesetzespaket gegen Hass und Hetze ist in Kraft getreten [Legislative package against hate and agitation put into effect], https://www.bmj.de/SharedDocs/Artikel/DE/2021/0401_Gesetzespaket_gegen_…
- 5Bundesministerium der Justice [Federal Ministry of Justice], ”Strafgesetzbuch § 127 Betreiben krimineller Handelsplattformen im Internet [Criminal law § 127 Running crimial platforms on the internet],“ https://www.gesetze-im-internet.de/stgb/__127.html
- 6“Germany revokes lese majeste law,” Deutsche Welle Online, June 2, 2017, https://www.dw.com/en/germany-revokes-lese-majeste-law/a-39094800
Are individuals penalized for online activities, particularly those that are protected under international human rights standards? | 5.005 6.006 |
In the context of the 2018 refugee crisis, previous years saw a surge in law enforcement investigations invoking the provision on “incitement to hatred” in the German criminal code, mostly related to hate speech against asylum seekers on social media platforms such as Facebook. As a result, there have been considerably more convictions for incitement to hatred.1 Official crime statistics documented 4,486 of these cases in 2018.2 In 2021 the BKA documented 2,411 posts from that year that fit the criminal code definition of hate speech, 52 percent of which were categorized as being politically right-wing.3 According to the BKA, 4.4 percent of politically motivated crimes in 2021 were hate postings.4
The German police regularly conduct raids on individuals who have posted hateful messages and insults against politicians, opening over 8,500 cases and charging more than 1,000 people since 2018. In March 2022, in the wake of the 2021 federal election, police conducted raids on approximately 100 homes of individuals who posted hateful messages against politicians during the 2021 election.5 These raids took place across 13 federal states; the police seized individuals’ devices and, in some cases, forced them to delete these messages (see B2).6 In cases where individuals phones are confiscated, the authorities can use technology by Israeli firm Cellebrite to search them if their owners refuse to open them.
In the 2021 Pimmelgate (Penisgate) case, which drove national debate about such raids, police searched the home of a man who tweeted that city senator Andy Grote was “such a penis.” Another man had his house raided after he posted a picture of a mural activists painted containing the phrase in response to a post from a far-right politician that criticized Muslims. Separately, a man identified by the courts as Dirk B. was fined €2,400 ($2,500) for a post that said Walter Lübcke, a local politician from Hesse who was murdered in 2019 by a neo-Nazi, had himself to blame for refusing police protection ahead of his murder. In another case, police searched the home of a man who posted an image that associated a false quote about immigration with a politician.7
In December 2021, eight defendants in the CyberBunker case (see B2), which concerned an online hosting platform that provided hosting services to criminal websites, were sentenced to between two years and four months to five years and nine months in prison.
- 1Pia Ratzesberger, “Verurteilt wegen Hasskommentaren auf Facebook [Convicted for hateful comments on Facebook],“ Süddeutsche Zeitung, February 3, 2016, https://www.sueddeutsche.de/muenchen/wolfratshausen/amtsgericht-verurte…; Lisa Steger, “Hennigsdorfer soll Geldstrafe wegen Volksverhetzung zahlen [Person from Hennigsdorf fined for incitement to hatred],“ Potsdam Zimmer, April 26, 2016, https://www.potsdamzimmer.de/hennigsdorfer-soll-geldstrafe-wegen-volksv…; “Bewährungsstrafe wegen Facebook-Hetze gegen Flüchtlinge” [Suspended sentence for incitement against refugees on Facebook],“ Zeit Online, October 16, 2015, https://www.zeit.de/gesellschaft/2015-10/facebook-hass-kommentare-hetze…
- 2Daniel Leisegang, “Rechte Hetze im Netz und die Grenzen des Rechtsstaats [Rightwing incitement online and the limits of the state under the rule of law],“ Netzpolitik, September 30, 2017, https://netzpolitik.org/2017/rechte-hetze-im-netz-und-die-grenzen-des-r…; Statista, ”Polizeilich erfasste Fälle von Volksverhetzung in Deutschland von 1996 bis 2018 [Cases of incitement to hatred in 1996 until 2018 as recorded by the police],“ 2019, https://de.statista.com/statistik/daten/studie/157434/umfrage/polizeili…
- 3Bundeskriminalamt [Federal Criminal Police Office], Politisch motivierte Kriminalität 2021, May 10, 2021, https://www.bka.de/SharedDocs/Downloads/DE/UnsereAufgaben/Deliktsbereic…
- 4Bundeskriminalamt [Federal Criminal Police Office], Politisch motivierte Kriminalität 2021, May 10, 2021, https://www.bka.de/SharedDocs/Downloads/DE/UnsereAufgaben/Deliktsbereic…
- 5Adam Satariano and Christopher F. Schuetze, “Where Online Hate Speech Can Bring the Police to Your Door,” The New York Times, September 23, 2022 https://www.nytimes.com/2022/09/23/technology/germany-internet-speech-a….
- 6Mitteldeutscher Rundfunk, “Hass-Nachrichten gegen Politiker: Polizei durchsucht Gebäude in Sachsen und Thüringen [Hate posts against politicians: police sweep buildings in Saxony and Thuringia],“ March 22, 2022, https://www.mdr.de/nachrichten/deutschland/hass-im-netz-facebook-social….
- 7Adam Satariano and Christopher F. Schuetze, “Where Online Hate Speech Can Bring the Police to Your Door,” The New York Times, September 23, 2022 https://www.nytimes.com/2022/09/23/technology/germany-internet-speech-a….
Does the government place restrictions on anonymous communication or encryption? | 3.003 4.004 |
User anonymity is compromised by SIM card registration rules under the Telecommunications Act (TKG) of 2004, which requires purchasers to submit their full name, address, international mobile subscriber identity (IMSI) number, and international mobile station equipment identity (IMEI) number.1 Nonetheless, the principle of anonymity on the internet is largely upheld as a basic right. A 2014 decision by the BGH, confirming that an online ratings portal was under no obligation to disclose the data of anonymous users, further strengthened that right.2
Website owners and bloggers are not required to register with the government, but most websites and blogs need to have an imprint naming the person in charge and providing a contact address. The anonymous use of email services, online platforms, and wireless internet access points is legal. A proposed amendment to the TKG (see C6) suggested by the Federal Ministry of the Interior and Community (BMI) included the obligation to provide an identity when registering for an email account,3 but this measure did not make it into the final law, which came into effect in December 2021, after criticism from activists and the media.4
In May 2019, the BMI brought forward a new initiative on mandatory backdoors for encrypted messaging services.5 The proposal has been widely criticized by civil society organizations, such as iRights.Lab, and industry professionals as it would mark a departure from long-standing pro-encryption policy. Experts also criticized a 2017 legislative proposal by the governing coalition to allow civil lawsuits to reveal an alleged offender’s legal name in suits related to violations of the right of personality online, especially defamation. Observers voiced concern that this might infringe on the right to anonymity online if interpreted broadly.6 Although discussions have been ongoing for years, no legislation has been introduced. In December 2021, the interior ministers of the states repeated their demand for countrywide legislation to be introduced.7
In October 2019, a man live streamed an antisemitic attack on a synagogue in Halle, Saxony-Anhalt, via the streaming platform Twitch. Following the attack, politicians from several states in February 2020 introduced legislation to the Bundesrat to require social networks and gaming platforms to collect users’ names, addresses, and dates of birth as well as proofs of identity, and to hand them over to the police upon request.8
In July 2020, it was revealed that French and Dutch police had hacked EncroChat phones, which come installed with a unique encrypted messaging service, and are often used by criminal networks. Following the hacking, 750 arrests related to the gun and drug trade were made in multiple German states as of July 2021.9
- 1Telecommunications Act (TKG), § 111, https://www.gesetze-im-internet.de/tkg_2021/
- 2“Bewertungsportal muss Nutzerdaten nicht weitergeben [Ratings portal does not have to disclose user data],” Zeit Online, July 1, 2014, https://www.zeit.de/digital/datenschutz/2014-07/bundesgerichtshof-daten…
- 3Markus Reuter, “Seehofer will Personalausweis-Pflicht für E-Mail und Messenger einführen,” Netzpolitik, March 3, 2021, https://netzpolitik.org/2021/tkg-novelle-seehofer-will-personalausweis-….
- 4Thomas Jarzombek, [Explanatory tweet by CDU Member of Parliament], March 3, 2021, https://twitter.com/tj_tweets/status/1367080369456054272.
- 5Marcel Rosenbach & Wolf Wiedmann-Schmidt, “Seehofer will Messengerdienste zum Entschlüsseln zwingen [Seehofer wants to force messaging service to decrypt],“ Spiegel Online, May 24, 2019, https://www.spiegel.de/netzwelt/netzpolitik/horst-seehofer-will-messeng…
- 6Markus Reuter, “Hate Speech: Union und SPD wollen Klarnamen-Internet durch die Hintertüre [Hate speech: CDU and SPD want real name Internet through the back door],“ Netzpolitik, February 23, 2017, https://netzpolitik.org/2017/hate-speech-union-und-spd-wollen-klarnamen….
- 7Helen Bielawa,“Ende der Anonymität? Innenminister fordern Hintertüren in Messengern [The end of anonimity? Minster of the Interior demands backdoors in messengers]“, T3N, Dezember 3, 2021, https://t3n.de/news/ende-anonymitaet-innenminister-1434523/.
- 8Daniel Laufer, “Der Identifizierungszwang für Gamer hat das Zeug zum Desaster [The identification obligation for gamers has the potential for disaster],“ Netzpolitik, February 14, 2020, https://netzpolitik.org/2020/identifizierungszwang-fuer-gamer-desaster-…; Bundesrat, “Entwurf eines Gesetzes zur Änderung des Netzwerkdurchsetzungsgesetzes zum Zweck der Erleichterung der Identifizierbarkeit im Internet für eine effektivere Bekämpfung und Verfolgung von Hasskriminalität [Draft law amending the Network Enforcement Act for the purpose of facilitating the Identifiability on the Internet for more effective control and Prosecuting hate crime],“ https://www.bundesrat.de/SharedDocs/drucksachen/2020/0001-0100/70-20.pd….
- 9Sebastian Grüner, “Mehr als 750 Verhaftungen in Deutschland nach Encrochat-Hack [More than 750 arrests in Germany after the Encrochat hack],” Golem, July 6, 2021, https://www.golem.de/news/polizei-mehr-als-750-verhaftungen-in-deutschl….
Does state surveillance of internet activities infringe on users’ right to privacy? | 2.002 6.006 |
Intelligence agencies conduct mass surveillance and have taken measures to expand the breadth of data they can monitor. Article 10 of the Basic Law guarantees the privacy of letters, posts, and telecommunications. These articles generally safeguard offline as well as online communication. A groundbreaking 2008 BVerfG ruling established a new fundamental right regarding the “confidentiality and integrity of information technology systems” as part of the general right of personality under Article 2 of the Basic Law.1
A German parliamentary commission of inquiry on intelligence practices—established after former US National Security Agency (NSA) contractor Edward Snowden in 2013 leaked documents exposing the various activities of US, British, and German intelligence services—completed its work in 2017.2 While the governing coalition concluded that the conduct of both the allied foreign intelligence services and the BND had been and continued to be within the bounds of the law, the opposition argued that ongoing mass surveillance was unlawful. Both sides drew criticism for not demanding sufficient steps to end the practice in Germany.3
A 2016 law granted the BND explicit permission to monitor domestic internet traffic so long as it targets non-German citizens.4 Press freedom groups argued that the law threatens the constitutionally protected work of foreign journalists reporting in Germany and outside the country5 and, in January 2018, a number of NGOs and foreign investigative journalists filed a constitutional complaint.6 The 2016 BND Law has also been scrutinized for its impact on the privacy of German internet users.7 While the BND is mainly tasked with foreign intelligence collection, one of the main concerns is that the law permits monitoring of all network traffic channeled through the Frankfurt-located DE-CIX—the world’s largest internet exchange point—which would at least unintentionally affect communications by German citizens as well.
In May 2020, the BVerfG ruled that the BND is still bound by the fundamental rights of the Basic Law when conducting telecommunications surveillance of foreigners in other countries, finding that the BND had acted unlawfully in monitoring the communications of foreign journalists.8
Public perception of the May 2020 ruling has been largely positive, welcoming the court’s verdict as a reinforcement of the Basic Law.9
However, in March 2021, the Bundestag and Bundesrat approved an amended version of the BND Law. The new law, which was initially proposed at the end of 2020, expands the scope of BND activities, allowing the interception of up to 30 percent of the transmission capacity of all global telecommunications networks.10 While the law protects “individual communications of natural persons,” it allows the BND to collect and process various kinds of information, including inventory, traffic, and content data enabling the monitoring of communications behavior, financial transaction data, and movement data of individuals in Germany and abroad. Furthermore, the law, which came into effect June 2021, enables federal police to hack communication providers abroad and to use malware against citizens without criminal histories.11 The insufficient protection of journalists, criticized by the BVerfG, is regulated in an added paragraph. However, the Federal Data Protection Commissioner, opposition politicians, and legal observers have criticized vague exceptions in the protection clause, making it ineffective.12 NGOs have already announced legal complaints against the revised BND Law.13
A verdict by the European Court of Human Rights concerning a complaint against the British Secret Service found that their mass data retention violates the right to privacy. The ruling stated that there would need to be a better evaluation of the principle of proportionality for the retention and that the scope of the information retained must be restricted.14 Journalistic outlet Netzpolitik put forward a freedom of information request for documents concerning discussion of the case in the German government, and concluded that there does not seem to be an intent to change the German law according to the verdict.15
In July 2021, amendments to the Federal Constitutional Protection Act that provide intelligence agencies with “additional powers of investigation through the regulation of source telecommunication monitoring, including messenger services” came into effect. 16 The measures—which were developed largely in response to right-wing extremism and also allow state security agencies to use malware—were passed by the Bundestag in June 2021 and were met with criticism and concern from rights group17 after they were initially approved by the federal cabinet in September 2020.18
The BND had also stored and processed bulk metadata records of phone calls via its traffic-analysis system, VerAS. In response to a lawsuit filed by RSF Germany,19 in December 2017, the BVerwG outlawed such intelligence gathering, prohibiting the BND from collecting and processing communications metadata for want of sufficient legal basis.20 In May 2018, the BND officially announced that it would end the practice.21
Surveillance conducted by intelligence services under the Act for Limiting the Secrecy of Letters, Posts, and Telecommunications (or G10 Act) has continued to decline.22 The BVerfG’s May 2020 judgment regarding the BND’s domestic surveillance activity involving foreigners raised hopes for a successful ruling against the G10 Act.23 In November 2020, the nonprofit Society for Civil Rights (Gesellschaft für Freiheitsrechte, or GFFF) filed a constitutional complaint arguing that any change to the G10 Act that allows German secret services to use Staatstrojaner (federal Trojan horse) is unconstitutional.24 No verdict was reached by the end of the coverage period.
Telecommunications interception by state authorities for criminal prosecutions is regulated by the criminal code and may only be employed for the prosecution of serious crimes for which specific evidence exists and when other, less intrusive investigative methods are likely to fail.
A 2008 BVerfG ruling establishing a new fundamental right to the “confidentiality and integrity of information technology systems” also found that covert online searches are only permitted in exigent circumstances.25 Based on that ruling, the federal parliament passed a law in 2009 authorizing the BKA to conduct—with a warrant—covert online searches to prevent terrorist attacks and to employ other methods of covert data collection, including the surveillance of private residences and the installation of software on a suspect’s computer that intercepts their communications at the source.26
In June 2017, the federal parliament enacted the “law for more effective and more practical criminal proceedings.” Most significantly, it included an extensive list of criminal offenses that would allow for the deployment of spyware on suspects’ mobile phones, tablets, and computers in order to enable monitoring of written and spoken text as well as the copying of data.27 Critics consider the law unconstitutional due to its expansive scope and long list of applicable offenses.28 In accordance with the law, the BKA has been permitted to install Staatstrojaner on suspects’ devices since January 2018.29 BKA hackers have reportedly breached Telegram and are targeting WhatsApp, although intelligence services have previously accessed WhatsApp without using a state Trojan.30 Complaints and lawsuits against the law and similar state laws have been filed at the BVerfG by data protection organizations and activists.31
In June 2021, the Christian Democratic Union/Christian Social Union (CDU/CSU) and SPD coalition passed a law allowing all 19 German intelligence agencies to use the Quellen-TKÜ Plus Staatstrojaner, which can read and collect ongoing communications and data as well as communications that happened before the software’s installation but after authorization of the surveillance order. It also obliges internet providers to help with the installation and allows police to preventively surveil a suspect. The law was followed by strong criticism by the opposition at the time, big tech companies, and NGOs, some of which considered filing complaints before the Federal Constitutional Court.32 An open letter demanding the government deploy better legislation for encryption and safe communication was published ahead of the law by NGOs, trade associations, and big tech companies—a rather unusual broad alliance within the realm of tech policy in Germany.33
In Bavaria, Germany’s second-largest state by population, the governing CSU introduced a bill in 2018 that grants the Bavarian police vastly expanded powers, including the authority to access any information technology system preventively in the event of a broadly defined imminent danger without concrete evidence of a specific crime.34 Critics allege that the bill would blur the line between police and intelligence services, a strict distinction placed into the constitution as a consequence of Nazi-era abuses.35 Since then, similar laws granting police forces vastly expanded powers to access communications have been passed in a number of other states.36 In some cases, these laws permit police to use Staatstrojaner. In March 2022, the Bavarian police faced criticism by the Bavarian commissioner for data protection after introducing software produced by US-based company Palantir, which has been criticized for facilitating rights violations, to connect several police databases. Other states, such as Hessen or North Rhine-Westphalia, have been using Palantir software as well, but the Bavarian introduction of the software might lead to countrywide use, as indicated by the Bavarian police’s president.37
The Bundestag approved a bill in December 2019 expanding the powers of customs authorities to conduct communications surveillance, including through monitoring software and device searches.38 The law also provides a legal basis to obtain user data from telecommunications providers without the user’s knowledge, and it permits customs authorities to use IMSI catchers, which mimic cell phone towers in order to collect data from proximate devices.39 The law’s phrasing vaguely describes the circumstances justifying the application of spyware, providing only that customs authorities may use technical means, if necessary, to intervene in information technology systems. Federal Commissioner of Data Protection and Freedom of Information Ulrich Kelber criticized the almost unconditional and unprompted collection and enrichment of data.40
Newly arrived migrants and refugees are also targeted by measures that infringe on their privacy rights. According to 2017 amendments to the asylum law, an arriving refugee’s electronic device data, including location data, may be copied and analyzed in order to determine the person’s place of origin if he or she does not provide identity documents.41 With the support of the GFFF, several refugees affected by this practice have taken legal action against the Federal Office for Migration and Refugees and filed a complaint with BfDI Kelber.42 In June 2021, the Berlin Administrative Court declared the practice could only be used if there were no available “milder measures,” such as asking for more documents or getting speech analysis.43
In June 2020, the health ministry launched the Corona-Warn-App,44 a COVID-19 contact tracing app that adopted data minimization principles and relied on decentralized proximity tracing. An update, introduced in December 2021 to follow an EU requirement for online verification services, contains a feature to allow verification of a user’s vaccination certificate by third parties, such as airlines or event organizers. As of January 2022, no online verification provider has been approved yet.45 This feature faced some criticism regarding the promise that no personal data would leave the app and would lead to more users giving up privacy to buy tickets online instead of anonymously at the box office.46
- 1BVerfG [Federal Constitutional Court], Urteil vom 27. Februar 2008 - 1 BvR 370/07 [Judgment of February 27, 2008 - 1 BvR 370/07] https://www.bundesverfassungsgericht.de/entscheidungen/rs20080227_1bvr0…; Federal Constitutional Court, “Press release no. 22/2008 of 27 February 2008,” https://web.archive.org/web/20140409004149/http://www.bundesverfassungs…; Wiebke Abel/Burkhard Schaferr, “The German Constitutional Court on the Right in Confidentiality and Integrity of Information Technology Systems – a case report on BVerfG,” NJW 2008, 822”, 2009, 6:1 SCRIPTed 106, https://web.archive.org/web/20151221022628/http://www2.law.ed.ac.uk/ahr…
- 2Federal Parliament, “Beschlussempfehlung und Bericht [Recommendation of resolution and report],” June 23, 2017, http://dip21.bundestag.de/dip21/btd/18/128/1812850.pdf
- 3Constanze Kurz, “Abschluss des NSA-BND-Ausschusses: Keine Revolte gegen die Geheimdienste [Conclusion of the NSA BND commission: No revolt against the intelligence services],” Netzpolitik, June 29, 2017, https://netzpolitik.org/2017/abschluss-des-nsa-bnd-ausschusses-keine-re…
- 4Teresa Sickert, “Was das neue BND-Gesetz für Internetnutzer bedeutet“ [What the new BND law means for Internet users],“ Spiegel Online, October 19, 2016, https://www.spiegel.de/netzwelt/netzpolitik/bnd-gesetz-das-bedeutet-es-…
- 5Sabine Leutheusser-Schnarrenberger, “Stoppt das BND-Gesetz!“ [Stop the BND law!], Handelsblatt, October 21, 2016, https://www.handelsblatt.com/politik/deutschland/ueberwachung-stoppt-da….
- 6“Ausländische Reporter klagen gegen BND-Gesetz [Foreign reporters sue because of BND law],“ Zeit Online, January 30, 2018, https://www.zeit.de/gesellschaft/zeitgeschehen/2018-01/bundesnachrichte…
- 7Teresa Sickert, “Was das neue BND-Gesetz für Internetnutzer bedeutet,“ [What the new BND law means for Internet users],“ Spiegel Online, October 19, 2016, https://www.spiegel.de/netzwelt/netzpolitik/bnd-gesetz-das-bedeutet-es-…
- 8“Verhandlungsgliederung der mündlichen Verhandlung in Sachen ‚Strategische Ausland-Ausland-Fernmeldeaufklärung des Bundesnachrichtendienstes‘ [Trial outline of the oral hearing in the case ‘strategic foreign-foreign telecommunication intelligence of the German Federal Intelligence Service’],“ Constitutional court , Press release, December 20, 2019, https://www.bundesverfassungsgericht.de/SharedDocs/Pressemitteilungen/D…; Bundesverfassungsgericht, “Judgement of May 19th 2020,“ Press Release No. 37/2020, https://www.bundesverfassungsgericht.de/SharedDocs/Pressemitteilungen/E…
- 9Markus Beckedahl, “Grundrechte gelten für alle [Basic Law accounts to everyone],“ Netzpolitik, May 19, 2020, https://netzpolitik.org/2020/grundrechte-gelten-fuer-alle/
- 10Deutscher Bundestag, “Entwurf eines Gesetzes zur Änderung des BND-Gesetzes zur Umsetzung der Vorgaben des Bundesverfassungsgerichts sowie des Bundesverwaltungsgerichts [Draft law amending the BND Act to implement the requirements of the Federal Constitutional Court and the Federal Administrative Court],“ Drucksache 19/26103, January 2021, p. 66, https://dserver.bundestag.de/btd/19/261/1926103.pdf#page=66
- 11Andre Meister, “Große Koalition will Staatstrojaner gegen Personen einsetzen, die noch keine Straftat begangen haben [Grand coalition wants to use state Trojans against people who have not yet committed a crime],“ Netzpolitik, February 17, 2021, https://netzpolitik.org/2021/bundespolizeigesetz-grosse-koalition-will-…
- 12Deutscher Bundestag, “Bundestag novelliert das BND-Gesetz” [Bundestag amended the BND-law],“ March 25, 2021, https://www.bundestag.de/dokumente/textarchiv/2021/kw04-de-bnd-gesetz-8…
- 13Christian Mihr, “Auch der neue Entwurf schützt ausländische Journalisten nicht besser [The new draft also does not protect foreign journalists any better],“ tagesspiegel, March 2, 2021, https://www.tagesspiegel.de/politik/abstimmung-ueber-neues-bnd-gesetz-i…
- 14Paulo Pinto de Albuquerque ,“Blankoscheck für Geheimdienste [Carte blanche for secret services], Netzpolitik, November 20, 2021, https://netzpolitik.org/2021/massenueberwachung-blankoscheck-fuer-gehei…
- 15Constanze, “Geheimdienst-Gesetze müssen auf den Prüfstand [There should be an evaluation of secret service laws], Netzpolitik, December 15, 2021, https://netzpolitik.org/2021/massenhafte-kommunikationsueberwachung-geh…
- 16Bundestag, “Bundestag changes the law of the protection of the constitution,” June 10, 2021, https://www.bundestag.de/dokumente/textarchiv/2021/kw23-de-verfassungss…
- 17Andre Meister, “Staatstojaner für Geheimdienste: `Tritt die Regelung in Kraft, werden wir dagegen klagen,“ Netzpolitik, June 6, 2020, https://netzpolitik.org/2020/staatstrojaner-fuer-geheimdienste-tritt-di…; https://www-bmi-bund-de.translate.goog/SharedDocs/gesetzgebungsverfahre…. (6/25/2021)
- 18BMI, “Bundeskabinett beschließt Novelle des Verfassungsschutzgesetzes [Federal Cabinet approves Amendment to the Law on the Protection of the Constitution],” September 21, 2020, https://www.bmi.bund.de/SharedDocs/pressemitteilungen/DE/2020/10/novell… Also see: Deutscher Bundestag, Drucksache 19/24785, “Gesetzentwurf der Bundesregierung eines Gesetzes zur Anpassung des Verfassungsschutzrechts [Draft Law of the Federal Government on the Adaptation of the Law on the Protection of the Constitution],“ November 2020, https://dserver.bundestag.de/btd/19/247/1924785.pdf.
- 19Andre Meister, “Eingestuftes Gutachten: Der BND speichert massenhaft Daten, will aber Betroffene nicht informieren [Classfied assessment: BND stores data in bulk but refuses to inform affected],“ Netzpolitik, December 14, 2016, https://netzpolitik.org/2016/eingestuftes-gutachten-der-bnd-speichert-m…
- 20Anna Biselli, “Bundesverwaltungsgericht: BND-Metadatensammlung in Datenbank VerAS unzulässig [Federal Administrative Court: BND metadata collection in database VerAS unlawful],“ Netzpolitik, December 14, 2017, https://netzpolitik.org/2017/bundesverwaltungsgericht-bnd-metadatensamm…
- 21Reporters Without Borders, “BND ends illegal data processing after ruling on RSF Germany lawsuit,” May 23, 2018, https://rsf.org/en/news/bnd-ends-illegal-data-processing-after-ruling-r…
- 22Bundestag, Parlamentarische Kontrollgremium Bericht, Drucksache 19/ 203769 [Parliamentary control body report, printed matter 19/203769], June 24, 2020, p. 8, https://dip21.bundestag.de/dip21/btd/19/203/1920376.pdf
- 23Ulf Buermeyer, “Artikel 10-Gesetz [Article 10 Law],“ Gesellschaft für Freiheitsrechte, October 23, 2016, https://freiheitsrechte.org/de-g10/
- 24Daniela Turß, “Verfassungsbeschwerde gegen Trojaner-Einsatz durch Verfassungsschutz und Predictive-Policing-Befugnisse der Polizei in Hamburg,” freiheitsrechte.org, November 23, 2020, https://freiheitsrechte.org/pm-verfassungsbeschwerde-polizei-verfassung…
- 25Bundesverfassungsgericht [Federal Constitutional Court], Provisions in the North-Rhine Westphalia Constitution Protection Act (Verfassungsschutzgesetz Nordrhein-Westfalen) on online searches and on the reconnaissance of the Internet null and void, judgment of February 27, 2008, 1 BvR 370/07, https://www.bundesverfassungsgericht.de/SharedDocs/Entscheidungen/EN/20…. For more background cf. W Abel and B Schafer, “The German Constitutional Court on the Right in Confidentiality and Integrity of Information Technology Systems – a case report on BVerfG,” NJW 2008, 822, (2009) 6:1 SCRIPTed 106, https://web.archive.org/web/20151221022628/http://www2.law.ed.ac.uk/ahr…
- 26Dirk Heckmann, “Anmerkungen zur Novellierung des BKA-Gesetzes: Sicherheit braucht (valide) Informationen [Comments on the amendment of the BKA act: Security needs valid information],” Internationales Magazin für Sicherheit nr. 1, 2009, https://web.archive.org/web/20180110111307/http://www.ims-magazin.de/in… ruling was based on preceding legislation from 2008: Bundesverfassungsgericht [Federal Constitutional Court], Provisions in the North-Rhine Westphalia Constitution Protection Act (Verfassungsschutzgesetz Nordrhein-Westfalen) on online searches and on the reconnaissance of the Internet null and void, judgment of February 27, 2008, 1 BvR 370/07, https://www.bundesverfassungsgericht.de/SharedDocs/Entscheidungen/EN/20…. For more background cf. W Abel and B Schafer, “The German Constitutional Court on the Right in Confidentiality and Integrity of Information Technology Systems – a case report on BVerfG,” NJW 2008, 822, (2009) 6:1 SCRIPTed 106, https://web.archive.org/web/20151221022628/http://www2.law.ed.ac.uk/ahr…
- 27Angela Gruber, Judith Horchert, and Fabian Reinbold, “Hackerangriff aus dem Bundestag“[Cyber attack by the federal parliament],” Spiegel Online, June 22, 2017, https://www.spiegel.de/netzwelt/netzpolitik/staatstrojaner-hackerangrif…
- 28Ulf Buermeyer, “Gutachterliche Stellungnahme [Expert assessment],“ Gesellschaft für Freiheitsrechte, May 31, 2017, https://freiheitsrechte.org/home/wp-content/uploads/2017/05/Stellungnah…
- 29Heribert Prantl, “Die digitale Inquisition hat begonnen [The digital inquisition has begun],“ Süddeutsche Zeitung, January 27, 2018, https://www.sueddeutsche.de/digital/staatstrojaner-die-digitale-inquisi…
- 30Andre Meister, “Geheimes Dokument: Das BKA will schon dieses Jahr Messenger-Apps wie WhatsApp hacken [Secret document: As early as this year, the BKA wants to hack messenger apps such as WhatsApp],” Netzpolitik, July 20, 2017, https://netzpolitik.org/2017/geheimes-dokument-das-bka-will-schon-diese…; Raimund Schesswendter, “BKA kann Whatsapp auch ohne Trojaner mitlesen [BKA can also read WhatsApp without a state trojan],“ t3n, May 11, 2021, https://t3n.de/news/whatsapp-ueberwachung-polizei-geheimdienste-bka-137…
- 31Gesellschaft für Freiheitsrechte, Verfassungsbeschwerde [Constitutional Complaint], https://freiheitsrechte.org/home/wp-content/uploads/2018/08/GFF_Verfass…; For lawsuit in NRW see:“Verfassungsbeschwerde gegen Polizeigesetz in NRW eingereicht [Constitutional complaint filed against police law in North Rhine-Westphalia],“ Netzpolitik, October 30, 2019, https://netzpolitik.org/2019/verein-digitalcourage-verfassungsbeschwerd…
- 32Pia Stenner,“Bundestag beschließt Staatstrojaner für Geheimdienste und vor Straftaten [Bundestag passes law for intelligence agencies and before crimes]“, Netzpolitik, June 11, 2021, https://netzpolitik.org/2021/verfassungsschutz-und-bundespolizei-bundes…
- 33Chaos Computer Club, „Sicherheit und Vertrauen schützen: Gegen eine unbegrenzte Ausweitung von Überwachung und für den Schutz von Verschlüsselung [Protecting safety and trust: Against an unlimited expansion of surveillance and fort he protection of encryption]“, June 2, 2021, https://www.ccc.de/de/updates/2021/offener-brief-alle-gegen-noch-mehr-s…
- 34Markus Reuter, “CSU will Polizei in Bayern zum Geheimdienst aufrüsten [CSU wants to transform Bavarian police into intelligence service],“ Netzpolitik, February 8, 2018, https://netzpolitik.org/2018/csu-will-polizei-in-bayern-zum-geheimdiens…
- 35Marie Bröckling, “Ab Sommer in Bayern: Das härteste Polizeigesetz seit 1945 [Coming this summer in Bavaria: The toughest police law since 1945],“ Netzpolitik, March 24, 2018, https://netzpolitik.org/2018/ab-sommer-in-bayern-das-haerteste-polizeig…
- 36Peggy Fiebig, “Mehr Befugnisse, mehr Sicherheit? [More powers, more safety?],“ Deutschlandfunk, March 27, 2019, https://peggy-fiebig.de/deutschlandfunk-hintergrund-mehr-befugnisse-meh…; Amnesty International, “Übersicht über die Änderungen der Polizeigesetze in den einzelnen Bundesländern [Overview of changes to police laws in the federal states],“ December 1, 2019, https://www.amnesty.de/sites/default/files/2019-12/deutschland-uebersic…
- 37Markus Reuter, “Bayerns Polizei setzt bald Software von Palantir ein [Bavaria’s police will soon use Palantir software]“, Netzpolitik, March 9, 2022, https://netzpolitik.org/2022/umstrittener-ueberwachungskonzern-bayerns-…
- 38Stefan Krempl, “Bundestag: Auch Zollfahnder dürfen künftig den Bundestrojaner einsetzen [Bundestag: Customs investigators may also use the federal Trojan in future],“ Heise-Online, December 20, 2019, https://www.heise.de/newsticker/meldung/Bundestag-Auch-Zollfahnder-duer…; Bundestag, "Entwurf eines Gesetzes zur Neustrukturierung des Zollfahndungsdienstgesetzes [Draft law to restructure the Customs Investigation Service Act],“ July 31, 2019, http://dip21.bundestag.de/dip21/btd/19/120/1912088.pdf.
- 39Bundestag, “Entwurf eines Gesetzes zur Neustrukturierung des Zollfahndungsdienstgesetzes [Draft Law on the restructuring of the Customs Investigation Service],” Drucksache 19/12088, July 31, 2019, p. 116, http://dip21.bundestag.de/dip21/btd/19/120/1912088.pdf
- 40“Stellungnahme des Bundesbeauftragten für Datenschutz und Informationsfreiheit (BfDI) zur öffentlichen Anhörung des Finanzausschusses des Deutschen Bundestages [The Federal Commissioner for Data Protection and Freedom of Information (BfDI), Statement on the public hearing of the Finance Committee of the German Bundestag,“ November 11, 2019, p. 4, https://www.bundestag.de/resource/blob/669316/e23b0f76130b754d1810da2e8…
- 41“Gesetz zur besseren Durchsetzung der Ausreisepflicht [Law on better enforcement of obligation to leave the country],” July 20, 2017, https://www.bgbl.de/xaver/bgbl/start.xav#__bgbl__%2F%2F*%5B%40attr_id%3…
- 42“Flüchtlinge klagen gegen Auswertung ihrer Handydaten [Refugees take legal action against analysis of their cell phone data],“ Zeit online, May 5, 2020, https://www.zeit.de/politik/deutschland/2020-05/fluechtlinge-klage-bund… Also see: Gesellschaft für Freiheitsrechte, Beschwerdeschreiben [Complaint], February 4, 2021l https://freiheitsrechte.org/home/wp-content/uploads/2021/02/BfDI-Beschw…
- 43Berit Kruse, “Besserer Schutz für Handydaten von Geflüchteten [Better protection for refugees‘ smartphone data],“ Sueddeutsche Zeitung, June 2, 2021, https://www.sueddeutsche.de/politik/datenschutz-handydaten-von-gefluech…
- 44Kay-Alexander Scholz, “Too few Germans using coronavirus pandemic tracing app,” Deutsche Welle, September 17, 2020, https://www.dw.com/en/too-few-germans-using-coronavirus-pandemic-tracin…; See also: “Corona-Warn-App Open Source Project,” https://www.coronawarn.app/en/.
- 45Robert Koch Institut, “Corona-Warn-App vereinfacht die Zertifikatatsprüfung bei der Ticketbuchung [Corona-Warn-App simpifies certificate verification for bookings]”, last updated January 10, 2022, https://www.coronawarn.app/de/blog/2021-12-20-cwa-2-15/
- 46Markus Reuter, „Neue Impfstatus-Prüfung auf Kosten der Anonymität [New vaccination verification at anonymity’s expense], Netzpolitik, January 10, 2022, https://netzpolitik.org/2022/update-der-corona-warn-app-neue-impfstatus…
Does monitoring and collection of user data by service providers and other technology companies infringe on users’ right to privacy? | 3.003 6.006 |
Score Change: The score declined from 4 to 3 because of December 2021 amendments to the telecommunications act that force email and messenger services to turn over user information to authorities.
The German government established a legal framework to protect personal data in 1990, though several laws require companies to provide user data to authorities. German law requires the localization of some telecommunications data.1
In December 2021,2 amendments to the TKG that compel email and messenger services to provide user identification information (“Bestandsdaten [inventory data]”) to law enforcement in case of criminal prosecution came into force. The law, which was passed in March 2021, also stipulates that messenger services based outside of Germany are subject to the law.3 The type of user data that gets transferred is based on a court ruling by the Federal Constitutional Court, and also confined by other laws such as the December 2021 Telekommunikation-Telemedien-Datenschutz-Gesetzs (TTDSG), which combines data protection passages of the Telekommunikationsgesetz (TKG) and Telemediengesetz (TMG) to comply with the GDPR.4
In April 2021, the amendments to NetzDG that require companies to report to the BKA the personal data of users who post certain types of illegal content (see B3), including far-right nationalist and extremist content, went into effect. The amendments state that personal data includes usernames, internet protocol (IP) addresses, port numbers and—with a judicial order—passwords.5 Digital rights associations made the criticism that the expected masses of user data that will flow to the BKA could hardly be processed by the public prosecutor’s offices.6 While President Frank-Walter Steinmeier initially refused to sign a package of laws after the parliament’s research service declared parts of the proposal unconstitutional for breaking regulations on the disclosure of inventory data,7 the inventory data disclosure process was reorganized and approved in March 2021, legalizing the transfer of data to the BKA.8 Google and Meta issued urgent motions against the amendments, resulting in a March 2022 ruling by the Cologne Administrative Court that the amendments contradict EU law in regard to home state regulations (see B2). Therefore, Google and Meta will not have to comply; Twitter and TikTok have ongoing motions that had not been ruled on by the end of the coverage period.9
Several constitutional complaints against data retention legislation have been filed and are pending at the BVerfG.10 In October 2020, the CJEU ruled that data retention is forbidden in principle but permissible if strict requirements are met. It can only be used against serious crimes like terrorism.11 A coalition of activists has made adjustments to their 2016 complaint following the inclusion of the unlawful legislation in the Telecommunications Act that went into effect in December 2021. The new government coalition is planning on discarding the passage relating to the legislation.12
Despite a 2014 CJEU decision that struck down the EU Data Retention Directive,13 the federal parliament enacted a law on data retention in 2015.14 Under the law, different sets of data would have to be stored on servers located within Germany for 10 weeks,15 and providers have to retain the numbers, as well as the dates and times, of phone calls and text messages. ISPs are also required to retain the IP addresses of all users, as well as the dates and times of connections. The location data of mobile phone connections must be saved for four weeks. The requirements exclude sites accessed, email traffic metadata, and the content of communications.
A December 2019 law establishes a legal basis for customs authorities to obtain user data from telecommunications providers without the knowledge of the person concerned (see C5).16 The amended Telecommunications Act of 2013 regulates “stored data inquiry” requirements.17 Under this law, approximately 250 registered public agencies, among them the police and customs authorities, are authorized to request both contractual user data and sensitive data from ISPs. Several studies have shown that judicial review does not actually take place in a majority of instances when it is required.18
Separately, antiterrorism legislation that was first passed after the September 11, 2001, terrorist attacks in the United States—legislation that, among other provisions, obliges banks or telecommunications operators to disclose customer information to authorities—was once again extended in 2015 until 202119 . This was followed by an indefinite extension in November 2020. Expert witnesses criticized the lack of evaluation of the legislation.20
- 1Nigel Cory, “Cross-Border Data Flows: Where Are the Barriers, and What Do They Cost?,” ITIF, May 1, 2017, https://itif.org/publications/2017/05/01/cross-border-data-flows-where-…
- 2Tomas Rudi, “Always firmly on data retention,” Netzpolitik, December 27, 2021, https://netzpolitik.org/2021/verfassungsbeschwerde-immer-feste-drauf-au…
- 3Markus Reuter and Tomas Rudi, “Which new surveillance projects covered Seehofer's "wish list of horror,” Netzpolitik, March 29, 2021, https://netzpolitik.org/2021/telekommunikationsgesetz-welche-neuen-uebe…
- 4BdDi (Der Bundesbeauftragte für den Datenschutz und die Informationsfreiheit / Federal Commisssioner for Data Protection and Freedom of Information), „Bestandsdatenauskunft nach dem Telekommunikationsgesetz (TKG) [Inventory data in the TGK], https://www.bfdi.bund.de/DE/Fachthemen/Inhalte/Telefon-Internet/Positio…
- 5Referentenentwurf des Bundesministeriums der Justiz und für Verbraucherschutz Entwurf eines Gesetzes zur Bekämpfung des Rechtsextremismus und der Hasskriminalität [Draft bill of the Federal Ministry of Justice and Consumer Protection Draft law to combat right-wing extremism and of hate crime], https://www.bmjv.de/SharedDocs/Gesetzgebungsverfahren/Dokumente/RefE_Be…
- 6“Offener Brief zu den Referentenentwürfen ‘Gesetz zur Änderung des Netzwerkdurchsetzungsgesetzes‘ und ‘Gesetz zur Bekämpfung des Rechtsextremismus und der Hasskriminalität‘ [Open letter on the drafts ‘Law to amend the Network Enforcement Act‘ and ‘Law to combat right-wing extremism and hate crime‘]," February 11, 2020, https://www.heise.de/downloads/18/2//4/2/0/9/7/20200211_offener_brief_n…
- 7Wissenschaftliche Dienste, “Verfassungsrechtliche Aspekte der Übermittlung von gelöschten Inhalten und IP-Adressen an das Bundeskriminalamt nach dem Gesetz zur Bekämpfung des Rechtsextremismus und der Hasskriminalität [Constitutional Aspects of the Transmission of Deleted Content and IP Addresses to the Federal Criminal Police Office under the Act to Combat Right-Wing Extremism and Hate Crime],“ Ausarbeitung, September 15, 2020, https://cdn.netzpolitik.org/wp-upload/2020/09/WD-10-030-20-Gesetz-Hassk…
- 8“Bundestag und Bundesrat ebnen Weg für Gesetz gegen Hasskriminalität [Bundestag and Bundesrat pave way for law against hate crime],“ Zeit online, March 26, 2021, https://www.zeit.de/digital/datenschutz/2021-03/hasskriminalitaet-bunde…
- 9Anna Biselli, “NetzDG-Meldepflicht verstößt gegen Unionsrecht [NetzDG-reporting obligations infringe EU law]”, Netzpolitik, March 1, 2022, https://netzpolitik.org/2022/verwaltungsgericht-koeln-netzdg-meldepflic….
- 10Jakob May, “Weitere Verfassungsbeschwerde gegen Vorratsdatenspeicherung eingereicht [Further constitutional complaint against data retention filed],“ Netzpolitik, January 27, 2016, https://netzpolitik.org/2016/weitere-verfassungsbeschwerde-gegen-vorrat…
- 11CJEU, 6.10.2020, C-623/17 - Privacy International; C-511/18, C-512/18, C-520/18 - La Quadrature du Net
- 12Tomas Rudl,“Immer feste drauf auf die Vorratsdatenspeicherung [Bashing the data retention],“ Netzpolitik, Dezember 27, 2021, https://netzpolitik.org/2021/verfassungsbeschwerde-immer-feste-drauf-au….
- 13Court of Justice of the European Union, “The Court of Justice declares the Data Retention Directive to be invalid,” Press Release, No 54/14, April 8, 2014, https://curia.europa.eu/jcms/upload/docs/application/pdf/2014-04/cp1400…
- 14“Bundestag beschließt Vorratsdatenspeicherung [Bundestag enacts data retention],“,Frankfurter Allgemeine, October 16, 2015, https://www.faz.net/aktuell/politik/inland/bundestag-beschliesst-vorrat…
- 15Providers would have to retain the numbers, dates and times of phone calls and text messages. ISPs are also required to retain the IP addresses of all users, dates and times of connections, as well as location data. The requirements exclude sites accessed, email traffic metadata, and the content of communications.
- 16Bundestag, “Entwurf eines Gesetzes zur Neustrukturierung des Zollfahndungsdienstgesetzes [Draft Law on the restructuring of the Customs Investigation Service],” Drucksache 19/12088, July 31, 2019, p. 116, http://dip21.bundestag.de/dip21/btd/19/120/1912088.pdf
- 17Bundesrat, “Mehr Rechtssicherheit bei Bestandsdatenauskunft [More legal certainty for stored data inquiry],” Press release no. 251/2013, May 3, 2013, https://www.bundesrat.de/SharedDocs/pm/2013/094-2013.html
- 18Two independent studies by the Universität of Bielefeld: “Wer kontrolliert die Telefonüberwachung? Eine empirische Untersuchung zum Richtervorbehalt bei der Telefonüberwachung [Who controls telecommunication surveillance? An empirical investigation on judicial overview of telecommunication surveillance],” eds. Otto Backes and Christoph Gusy (2003), and Hans-Jörg Albrecht, Claudia Dorsch, Christiane Krüpe; Rechtswirklichkeit und Effizienz der Überwachung der Telekommunikation nach den §§ 100a, 100b StPO und anderer verdeckter Ermittlungsmaßnahmen [Legal reality and efficiency of wiretapping, surveillance and other covert investigation measures], Max-Planck Institute for Foreign and International Criminal Law (2003), https://web.archive.org/web/20180919112855/https://www.mpg.de/868492/pd… evaluated the implementation of judicial oversight of telecommunications surveillance. Both studies found that neither the mandatory judicial oversight nor the duty of notification of affected citizens are carried out. According to the study by the Max Planck Institute, only 0.4 percent of the requests for court orders were denied.
- 19“Anti-Terror-Gesetze gelten bis 2021 [Anti terror laws in force until 2021],” Tageschau.de, November 27, 2015, https://newstral.com/de/article/de/1010040490/abstimmung-im-bundesrat-a…
- 20Elke Steven,”Freiheitsbestandsanalyse statt überstützter Entfristing [Freedom evaluations instead of rushed indefinite extension]“, Netzpolitik, November 5, 2020, https://netzpolitik.org/2020/antiterrorgesetze-freiheitsbestandsanalyse…
Are individuals subject to extralegal intimidation or physical violence by state authorities or any other actor in relation to their online activities? | 4.004 5.005 |
There were few reported cases of direct physical intimidation or violence against online journalists or other ICT users in retaliation for their activities during the coverage period.
In 2022, RSF downgraded Germany by three places to 16th in its annually published Press Freedom Index. Since last year, Germany’s press freedom no longer ranks as “good” but only “satisfactory” due to increasing incidents of reporters being attacked by conspiracy theorists at anti-lockdown protests.1
In August 2020, several journalists and press photographers were insulted and harassed by demonstrators protesting COVID-19 measures in Berlin. The European Centre for Press and Media Freedom reported an increase in harassment of journalists online and counted 26 incidents of intimidation or assault in Germany between March and October 2020.2
In October 2019, law enforcement shut down Germany’s biggest file-sharing platform, Share-Online.biz, and seized its website and servers. After police raided their offices and employees’ apartments, the operators were charged with commercial unauthorized use of copyright protected works.3 In August 2020, Europol, in coordination with authorities in other countries, shut down the Sparks Group,4 one of the world’s largest piracy groups, which had some of its servers in Germany.5
In June 2018, police raided the offices and homes of the Zwiebelfreunde (Onion Friends), an activist association promoting online anonymity tools—an action a court later ruled illegal. Police seized documents containing names, addresses, and bank details of Zwiebelfreunde supporters, as part of a case in which they were classified as witnesses. Following criticism from press freedom and internet rights activists, the Munich Regional Court ruled the searches and seizures illegal and ordered all seized material returned.6
A June 2019 study on hate speech reported that immigrants, Muslim people, women, and LGBT+ people are predominantly targeted by harassment online. Men reported experiencing online harassment more frequently than women, which might stem from different online behavior.7 When it comes to cases of online discrimination against LGBT+ people, Germany ranks relatively low when compared to other European countries.8 A study on the impact of NetzDG (see B2 and B3) published in December 2021 found there has been about a 10 percent decrease in hate speech comments on Twitter since the law took effect. The researchers looked at a time frame from 2016 to 2019 and focused in particular on tweets containing the terms “Islam,” “Migration,” and “Displacement.”9
In December 2021, the Federal Constitutional Court ruled in favor of Renate Künast, a politician who was harassed after a right-wing blogger disseminated a fake quote that insinuated she supported pedophilia. The Berlin Regional Court initially ruled that the comments did not constitute insults because they contained a “factual reference to the discussion” and refused to turn over user information after Künast filed a civil suit.10
- 1Reporters without Borders, ”Germany,“ https://rsf.org/en/germany
- 2Media freedom rapid response, “Mapping media freedom,” https://www.mappingmediafreedom.org/analysis/
- 3Max Hoppenstedt, “Größte deutsche Plattform für illegal Downloads abgeschaltet[Germanys biggest platform for illegal downloads shut down],“ Sueddeutsche Zeitung, October 17, 2019, https://www.sueddeutsche.de/digital/share-online-offline-1.4644797; “Gesetz über Urheberrecht und verwandte Schutzrechte (Urheberrechtsgesetz) [Law on Copyright and Related Rights (Copyright Law)],“ § 106, Division 4 Subdivision 2, “Urheberrechtsgesetz vom 9. September 1965 (BGBl. I S. 1273), das zuletzt durch Artikel 1 des Gesetzes vom 28. November 2018 (BGBl. I S. 2014) geändert worden ist,“ https://www.gesetze-im-internet.de/urhg/BJNR012730965.html#BJNR01273096…
- 4Europol Press Release, “One of the biggest online piracy groups in the world has been taken down,” August 26, 2020, https://www.europol.europa.eu/newsroom/news/one-of-biggest-online-pirac…
- 5Achim Sawall, “Verhaftungen führen zu weniger illegalen Releases,” Golem.de, September 5, 2020, https://www.golem.de/news/release-groups-verhaftungen-duennen-illegale-…
- 6Martin Holland, “Zwiebelfreunde: Hausdurchsuchungen bei Datenschutz-Aktivisten rechtswidrig [Zwiebelfreunde: Searches of homes of data protection activists illegal],“ Heise Online, August 24, 2018, https://www.heise.de/newsticker/meldung/Zwiebelfreunde-Hausdurchsuchung….
- 7Institut für Demokratie und Zivilgesellschaft, “#Hass im Netz: Der schleichende Angriff auf unsere Demokratie – Eine bundesweite repräsentative Untersuchung [#hate online: The gradual attack on our democracy – a nationwide representative study],“ p. 16-20, June 2019, https://www.idz-jena.de/fileadmin/user_upload/_Hass_im_Netz_-_Der_schle…
- 8European Union Agency for Fundamental Rights, “Experience of cyberharassment for any reason in the past 12 months,“ July 2019, https://fra.europa.eu/en/data-and-maps/2020/lgbti-survey-data-explorer
- 9Netzpolitik.org, “Seit dem NetzDG gibt es weniger Hass auf Twitter [Less hate on Twitter since NetzDG introduction],“ January 13, 2022, https://netzpolitik.org/2022/studie-seit-dem-netzdg-gibt-es-weniger-has…
- 10Christian Rath, “Renate Künast und Internet-Beleidigungen: Nicht alles aushalten müssen [Renate Künast and internet insults : Not having to endure everything],“ taz online, February 2, 2022, https://taz.de/Renate-Kuenast-und-Internet-Beleidigungen/!5829723/ Bundesverfassungsgericht [Federal Constitutional Court] BVerfG, Beschluss der 2. Kammer des Ersten Senats vom 19. Dezember 2021 - 1 BvR 1073/20 -, Rn. 1-53, http://www.bverfg.de/e/rk20211219_1bvr107320.html
Are websites, governmental and private entities, service providers, or individual users subject to widespread hacking and other forms of cyberattack? | 2.002 3.003 |
Human rights activists and NGOs are rarely victims of cyberattacks or other forms of technical violence that are aimed at stifling freedom of expression. However, government institutions and the business sector have been targeted by cyberattacks.1 Due to the shift toward online communication during the COVID-19 pandemic, the risks of cyberattacks have increased. The CDU suffered several attacks during their 2021 party conference, when they elected a new party leader.2 Thus, concerns about the safety of the federal electoral campaign increased.3
A report on IT security by the Federal Office for Information Security (BSI) covering June 2020 to May 2021 described the situation in Germany as “serious to critical.” There have been more malware variants, ransom fees, and blackmailing.4 The IT Security Act 2.0 (IT-Sicherheitsgesetz 2.0) which updates a 2015 law, includes stricter security guidelines for companies that are important to Germany’s infrastructure.5
In September 2021, a cyberattack targeted the Federal Statistical Office, whose director is also the Federal Returning Officer overseeing elections. According to the BMI, the server in question was separate from servers relating to the election.6 In the month of the federal elections, cyberattacks on several EU member states, politicians, and journalists took place. These attacks were attributed to the hacker group Ghostwriter, which has been linked to both the Russian and Belarusian secret service, and were strongly condemned by the EU.7 After the start of the war in Ukraine, the German domestic intelligence services warned about new attacks by the group, which had gained access to data of some members of the Bundesländer (German state) parliaments by targeting them with phishing attacks.8
In December 2018, the personal data of parliamentarians, politicians, television personalities, activists, and YouTube artists were published online.9 An individual who confessed to the leaks, a German citizen, was arrested shortly after the case received public attention in January 2019.10 The case led to public discussions about online safety since much of the retrieved data was protected by weak passwords such as “1234.”11
- 1Nicolai Kwasniewski, “Ein Hack, eine versetzte Schweißnaht – fatale Folgen [A hack, a shifted weldseam – fatal consequences],“ Spiegel Online, November 30, 2017, https://www.spiegel.de/wirtschaft/unternehmen/cyberangriffe-so-gefaehrd…
- 2Statement of CDU general secretary Paul Ziemiak on January 17, 2021.
- 3Janosch Delker, “Cyber-Bedrohungen überschatten Bundestagswahlkampf,“ Deutsche Welle, March 8, 2021, https://www.dw.com/de/cyber-bedrohungen-%C3%BCberschatten-bundestagswah…
- 4Bundesministerium für Sicherheit der Informationstechnik,“ Report on the State of IT Security in Germany 2021“, September 2021, https://www.bsi.bund.de/EN/Service-Navi/Publications/SecuritySituation/…
- 5Stefan Hessel,“IT-Sicherheitsgesetz 2.0: BSI veröffentlicht FAQ zu neuen Pflichten [IT security law 2.0: Federal Office for Information Security published FAQ for new obligations], heise online, October 21, 2021, https://www.bsi.bund.de/EN/Service-Navi/Publications/SecuritySituation/… .
- 6Kai Clement, „Entwarnung nach Hackerangriff [All-clear after hacker attack]“, Tagesschau, September 24, 2021, https://www.tagesschau.de/inland/btw21/cyberangriff-statistisches-bunde….
- 7Council of the EU, “Declaration by the High Representative on behalf of the European Union on respect for the EU’s democratic processes“, September 24, 2021, https://www.consilium.europa.eu/en/press/press-releases/2021/09/24/decl….
- 8Spiegel Online, “ Neuer Angriff der ‘Ghostwriter‘ in Deutschland [New attack by ‘Ghostwriter‘ in Germany],“ March 6, 2022, https://www.spiegel.de/politik/deutschland/mutmasslich-russische-hacker…
- 9Stefan Krempl, “Gehackte Daten: Politiker beklagen schweren Angriff auf die Demokratie [Hacked data: Politicians lament significant attack on democracy],“ Heise Online, January 4, 2019 https://www.heise.de/newsticker/meldung/Gehackte-Daten-Politiker-beklag…
- 10Markus Beckedahl, “Doxing: Tatverdächtiger war politisch motiviert, aber seine Straftaten sollen nicht politisch motiviert sein [Doxing: Suspect was politically motivated, but his crimes are supposed to not be politically motivated],“ Netzpolitik, January 10, 2019, https://netzpolitik.org/2019/doxing-tatverdaechtiger-war-politisch-moti….
- 11Melissa Eddy, “German Man Confesses to Hacking Politicians’ Data, Officials Say,“ New York Times, January 8, 2019, https://nytimes.com/2019/01/08/world/europe/germany-hacking-arrest.html


Country Facts
-
Global Freedom Score
94 100 free -
Internet Freedom Score
77 100 free -
Freedom in the World Status
Free -
Networks Restricted
No -
Websites Blocked
Yes -
Pro-government Commentators
No -
Users Arrested
No