- The Federal Court of Justice has referred questions on the General Data Protection Regulation to the European Court of Justice.
- Issue: Does a pharmacist violate data protection regulations when selling via internet platforms?
- Can competitors take legal action for data protection violations and sue in civil courts?
- Regulations in Chapter VIII of the GDPR could conflict with national regulations.
- It also deals with customer data entered when purchasing pharmacy-only medicines online.
- Question of whether certain data entered is considered health data within the meaning of the GDPR.
- Proceedings I ZR 222/19 were suspended until the decision on I ZR 223/19.
The First Civil Senate of the Federal Court of Justice, which is responsible for competition law, has referred the questions discussed in this blog post to the Court of Justice of the European Union for a preliminary ruling, namely whether a pharmacist who sells medicinal products on an internet sales platform is in breach of the data protection provisions applicable to health data and whether such a breach can be pursued by another pharmacist with a competition law action before the civil courts.
The Federal Court of Justice has stayed proceedings I ZR 223/19 and referred the question to the Court of Justice of the European Union for a preliminary ruling as to whether the provisions in Chapter VIII of the General Data Protection Regulation preclude national provisions which – in addition to the powers of intervention of the supervisory authorities responsible for monitoring and enforcing the Regulation and the legal protection options of the data subjects – grant competitors the power to take action against the infringer by way of an action before the civil courts for infringements of the General Data Protection Regulation from the perspective of the prohibition of engaging in unfair commercial practices.
In addition, the Federal Court of Justice asked the Court of Justice of the European Union whether the data that customers of a pharmacist acting as a seller on an Internet sales platform enter when ordering pharmacy-only but not prescription-only medicines on the sales platform (name of the customer, delivery address and the information necessary for the individualization of the pharmacy-only medicine ordered) constitute health data within the meaning of Art. 9 para. 1 DSGVO as well as data on health within the meaning of Art. 8 para. 1 of Directive 95/46/EC (Data Protection Directive, DSRL) are.
The BGH has suspended the other proceedings mentioned in my blog post, I ZR 222/19, pending a decision on its reference for a preliminary ruling in the case I ZR 223/19.
