
Federal Labor Court (BAG): Compensation for GDPR Violation
Germany’s Federal Labor Court (Bundesarbeitsgericht, BAG) has ruled that the unauthorized transfer of employee data—specifically for the trial use of HR software—can trigger a claim for damages under the GDPR. The case concerned a cloud-based HR software solution. The takeaway for companies is clear: even internal projects must operate within strict data protection boundaries. Works agreements offer only limited protection.