Germany Data Removal Guide (2026)
Germany applies the GDPR alongside the BDSG and is supervised by a federal authority plus independent state data-protection authorities. Its standout suppression tools are the residents'-registry blocks: the Übermittlungssperre and the §51 Auskunftssperre.
Research status: sources last checked 2026-09-07.
This page is educational orientation, not legal advice. The legal fields below are a research snapshot; eligibility, exemptions, deadlines, penalty rules and broker routes can change. Verify the current statute and regulator guidance before relying on a right or filing a complaint.
At a glance
- Governing law
- GDPR + BDSG
- Response deadline
- 1 month (extendable by 2 months for complex requests)
- Regulator
- BfDI (federal) + 17 state data-protection authorities
- Private right of action
- Yes: compensation under Article 82; representative actions available
GDPR + Bundesdatenschutzgesetz (BDSG)
Germany applies the GDPR plus the Bundesdatenschutzgesetz (BDSG), which adds national rules on employee data, video surveillance, and credit scoring (§31 BDSG) and a lower mandatory threshold for data protection officers. Enforcement is decentralised: the federal BfDI covers federal bodies and telecoms, while the relevant state-level authority handles private companies, so the right regulator depends on the organisation's sector and location. Bavaria has separate public-sector and private-sector authorities.
Read the full GDPR + BDSGexplainer →Scope, penalties, private right of action, enforcement history.
What rights do Germany residents have?
- →Right of access to personal data (Article 15), including credit-bureau data subject to the applicable route and exceptions
- →Right to erasure / right to be forgotten (Article 17)
- →Right to object: absolute for direct marketing (Article 21)
- →Right to rectification and restriction (Articles 16, 18)
- →Right to block residents'-register disclosures (Übermittlungssperre / Auskunftssperre §51 BMG)
- →Right to lodge a complaint with the competent state DPA or BfDI (Article 77)
Who holds your data in Germany?
Key German data holders include the credit bureau SCHUFA, address traders ("Adresshändler"), and directory/people-search services (Das Telefonbuch, Das Örtliche). The marketing-objection right, the Robinsonliste suppression list, and the Melderegister disclosure blocks are distinct routes; credit-report and automated-scoring questions may involve additional rules and should be checked with the relevant provider or regulator.
Public-record sources brokers scrape
- Melderegister (residents' registration): third parties can request basic address data (block it; see steps)
- Handelsregister / Unternehmensregister: directors, managing directors, registered office
- SCHUFA and other credit bureaus: financial/identity data
- Grundbuch (land register), NOT public; access requires a legitimate interest
Related guide: How to Request an Auskunftssperre or Übermittlungssperre in Germany
How to remove your data in Germany
- 1File Übermittlungssperren at your Bürgeramt to block registry disclosure for advertising, to political parties/churches, and for anniversary lists.
- 2If you face a credible risk, ask your local authority about an Auskunftssperre under §51 Bundesmeldegesetz. Eligibility, evidence, scope, duration, and renewal depend on the current authority decision.
- 3Delete your Das Telefonbuch / Das Örtliche entry (via "Mein Telefonbuch" or your phone provider, with ID).
- 4Request an Article 15 SCHUFA data copy through the provider's current route, dispute errors, and ask about deletion or correction of outdated entries where the legal conditions are met.
- 5Register on the Robinsonliste, and send GDPR objection (Art. 21) + erasure (Art. 17) requests; complain to the competent state DPA.
Generate requests in under 60 seconds
Generate requests for 1,034 US/global broker workflows for $9
What if a company ignores your request?
Consider the BfDI (federal) + 17 state data-protection authorities information or complaint route above if the controller does not respond or the response is unsatisfactory. This guide records the following penalty orientation: €20M or 4% of global annual turnover. The private-action note is: Yes: compensation under Article 82; representative actions available. Neither field is an individual award or a promise of enforcement.
Open the BfDI (federal) + 17 state data-protection authorities information or complaint route ↗FAQ: Germany data removal
Who regulates data privacy in Germany?+
A decentralised system: the federal BfDI plus 17 independent state-level data-protection authorities. There are 16 Länder but Bavaria has separate public-sector and private-sector authorities; the right regulator depends on the organisation's sector and location.
How do I hide my address from Germany's residents' register?+
File an Übermittlungssperre at your local Bürgeramt for the disclosures covered by that route. If you face a threat, ask the authority about an Auskunftssperre under §51 BMG; the authority decides eligibility, scope, duration, and renewal under the current rules.
How do I get and correct my SCHUFA data?+
You can make an Article 15 access request to SCHUFA and use the provider's current route to dispute inaccuracies. Repeated requests, scoring, retention, and access by companies depend on the GDPR, BDSG, credit-information rules, and the facts; do not assume one annual-copy limit or a universal consent requirement.
How do I remove myself from Das Telefonbuch or Das Örtliche?+
Edit or delete your entry via "Mein Telefonbuch", or contact your telephone provider / DTM Deutsche Tele Medien with ID verification; full removal can take a few weeks.