Facebook data leak: Consumers can now join VZBV's collectiv legal action

• German Federal Court of Justice (BGH) finds a compensation of 100 euros suitable even for a “mere loss of control” over personal data
• vzbv argues for higher compensation for affected consumers in cases where personal data such as date of birth and relationship status have become public
• Consumers can check whether their case qualifies for the collective legal action with vzbv’s online tool and how they can participate

People who were affected by the Facebook data leak can now join the collective legal action (model declaratory action) of the Federation of German Consumer Organisations (Verbraucherzentrale Bundesverband – vzbv). The lawsuit against Meta Platforms Ltd. will help millions of Facebook users in Germany to enforce their claims for damages in a simple and uncomplicated manner. Background: In November 2024, the German Federal Court of Justice (BGH) ruled on the Facebook data leak that the “mere loss of control” over personal data is sufficient for a claim for damages.

Jutta Gurkmann, Director of Consumer Policy at vzbv: “The Federal Court of Justice has set the direction: Consumers who were affected by the Facebook data leak are entitled to financial compensation. Those affected can now join the collective legal action brought by the Federation of German Consumer Organisations. With the lawsuit, vzbv is helping affected consumers to enforce their claims against Meta.”

vzbv has brought the collective legal action against Meta Platforms Ltd. as a model declaratory action before the Hanseatic Higher Regional Court of Hamburg. This way, vzbv intends to obtain a declaratory judgement on the requirements for claims for damages and the amount of compensation.

Depending on the case: vzbv wants the judgement to ascertain amounts of up to 600 euros

In vzbv’s view, Meta must pay significantly more than 100 euros in compensation in certain cases: for example, if a person’s home address, email address, date of birth and relationship status have become public in addition to their Facebook ID, name and telephone number. In such cases, vzbv considers compensation of 600 euros to be appropriate.

Joining the Facebook collective legal action

Consumers can join the collective legal action by signing up to the claims register at the Federal Office of Justice. Registration has been open since 5 may 2025. Consumers can find out how to register by using vzbv’s online tool "Klage-Check" at www.sammelklagen.de/verfahren/facebook. With just a few questions, the tool first checks whether the lawsuit is suitable for the individual case. Consumers then receive instructions on how to enrol in the claims register.

Once consumers have signed up to the register, they are part of the collective legal action. Their claims can then no longer prescribe - no matter how long the proceedings take. Participation is free of charge.

Anyone who would like to stay informed about news on the Facebook collective legal action by email can sign up for vzbv's News-Alert on the proceedings.

The collective action is aimed at Facebook users in Germany who were affected by the well-publicised Facebook data leak from 2021.

Background: Federal Court of Justice ruling

The German Federal Court of Justice (BGH) ruled that 100 euros was suitable compensation in an individual case relating to Facebook user's loss of control over their own data. Details can be found in the ruling of 18 November (Ref. VI ZR 10/24). The ruling on the Facebook data leak makes it easier for those affected to obtain compensation. According to the BGH, they are no longer required to provide evidence that they were personally harmed by the data leak. Simply being affected by the leak is sufficient.

Due to the Facebook data leak, personal data of 533 million people worldwide became public. According to media reports, this affected around six million Facebook accounts in Germany. The stolen data can be used for, among other things, spam, phishing texts, and identity theft.