Germany’s constitutional court has ruled that a number of laws governing the collection of users’ mobile phone and internet data in the country are unconstitutional as they violate the right to privacy.

The laws set out the way in which German security agencies can gather information on customers - such as access names, addresses, birth dates and IP addresses - from telecoms companies.The laws were challenged by privacy campaigners.

Proportionate

The ruling comes a day after the European Court of Justice (ECJ) ruled that the Privacy Shield agreement on the transfer of data from the EU to the US was invalid.

The court said that, in principle, providing information on subscriber data was allowed under German constitutional law, but it added that the German authorities must create “a proportionate legal basis” for both the transfer of data by telecoms firms and retrieval of such data by the authorities.

Limits

It ruled that laws on the transfer and retrieval on data would have to put limits on how such data could be used, as well as provide adequate protection for people under the law.

The court said that, for the country’s security or intelligence agencies to use such powers, there needed to be “a specific danger in the individual case, and an initial suspicion of criminal conduct in the context of the investigation and prosecution of offences”.