On November 18, 2024, the Federal Court of Justice (BGH) in Germany ruled that local Facebook users affected by a significant data breach in 2021 can claim compensation, marking a pivotal moment in data protection enforcement.

This ruling lowers the barriers for users impacted by data theft, particularly in a case involving the leak of data from approximately 533 million Facebook accounts across 106 countries.

The 2021 breach resulted from a hacker attack that compromised user data due to inadequate account protections, leading to widespread concerns over data security.

Meta, Facebook's parent company, has consistently argued that these lawsuits are baseless, claiming no data protection breach occurred and that over 6,000 similar claims have been dismissed by German courts.

This decision is notable as it introduces a new lead decision procedure by the BGH, which is expected to influence thousands of similar cases pending in lower courts throughout Germany.

Victims of the breach only need to demonstrate that they were affected by the incident to qualify for compensation, without needing to prove misuse of their data or specific emotional harm.

The court suggested a starting compensation amount of 100 euros for affected users, although the final amounts will be determined later, especially if misuse of data is proven.

This ruling could unify the inconsistent interpretations of data protection laws across different jurisdictions in Germany, as many similar lawsuits are currently pending.

Affected users are advised to act quickly to file their compensation claims, as many rights will expire by the end of 2024.

The ruling signifies a growing recognition that loss of control over personal data is a valid harm, paving the way for increased accountability among online platforms.

The BGH has referred the case back to the Cologne Higher Regional Court to reassess whether a data protection violation occurred and how to evaluate damages.

The hope is that this ruling will prompt online platforms to take user data protection more seriously, even if it does not significantly impact their profits.