According to media reports, the first cease-and-desist letters have been issued in relation to alleged violations of the EU General Data Protection Regulation (GDPR). The cease-and-desist letters seem to concern, inter alia, data protection declarations on websites. In particular, the letters seem to address specific website tools (e.g., Google Fonts, Like buttons) and whether their use and description in the data protection declaration is compliant with the GDPR.

The legitimacy of the cease-and-desist claims addressed in these letters is unclear. For example, it is doubtful whether unfair competition law can form a legal basis for such claims since it is unclear whether GDPR rules are "market conduct rules" within the meaning of section 3 a) of the German Unfair Competition Act (Gesetz gegen den unlauteren Wettbewerb, UWG).

In order to prevent abusive cease-and-desist letters, various legislative proposals have been put forward by the German legislative bodies.

The Legislative Proposals

On 12 June 2018, the parliamentary group of the Free Democratic Party (FDP) requested that the German federal government combat abusive cease-and-desist-letters. The FDP says that a law is needed to ensure that, in case cease-and-desist letters are based on non-compliance with information duties under Articles 13 and 14 of the GDPR (e.g. incomplete data protection statements), the person who issues the letter has no claim for reimbursement of expenses against the addressee.

According to German daily newspaper Die Welt, Angela Merkel's Christian Democratic Union (CDU/CSU) parliamentary group plans to enact legislative change before the parliamentary summer break to prevent lawyers from claiming fees for the issuance of GDPR cease-and-desist letters during a one-year grace period. Social Democratic Party (SPD ) representatives so far have been reluctant to express support for the proposal.

Most recently, on 26 June 2018, the federal state of Bavaria introduced draft legislation into the German Federal Council to, inter alia, prevent abusive GDPR cease-and-desist letters. The proposal is to amend the German Unfair Competition Act and the Unfair Terms and Conditions Act (Unterlassungsklagegesetz, UKlaG). According to the proposal, GDPR provisions should be explicitly and generally excluded from the scope of unfair competition law. The right of action of associations under the Unfair Terms and Conditions Act shall further be limited to associations that fulfill the requirements under the GDPR. The proposal aims in particular to protect small- and medium-sized enterprises against unjustified GDPR cease-and-desist-letters.

A Look Ahead

A law on the issue of cease-and-desist-letters based on alleged GDPR violations would bring some legal certainty on whether and under what circumstances cease-and-desist claims are justified. The German Federal Council will decide in July 2018 whether to submit the Bavarian draft legislation into the German parliament. It remains to be seen whether the draft can spawn support in the German Federal Council and what law ultimately will be passed.

Mayer Brown is a global legal services provider comprising legal practices that are separate entities (the "Mayer Brown Practices"). The Mayer Brown Practices are: Mayer Brown LLP and Mayer Brown Europe – Brussels LLP, both limited liability partnerships established in Illinois USA; Mayer Brown International LLP, a limited liability partnership incorporated in England and Wales (authorized and regulated by the Solicitors Regulation Authority and registered in England and Wales number OC 303359); Mayer Brown, a SELAS established in France; Mayer Brown JSM, a Hong Kong partnership and its associated entities in Asia; and Tauil & Chequer Advogados, a Brazilian law partnership with which Mayer Brown is associated. "Mayer Brown" and the Mayer Brown logo are the trademarks of the Mayer Brown Practices in their respective jurisdictions.

© Copyright 2018. The Mayer Brown Practices. All rights reserved.

This Mayer Brown article provides information and comments on legal issues and developments of interest. The foregoing is not a comprehensive treatment of the subject matter covered and is not intended to provide legal advice. Readers should seek specific legal advice before taking any action with respect to the matters discussed herein.