Freedom on the Net 2013 - Germany

2013 Scores

Freedom on the Net Status: Free
Freedom on the Net Total: 17
A Subtotal: Obstacles to Access: 4
B Subtotal: Limits on Content: 4
C Subtotal: Violations of User Rights: 9

Key Developments: May 2012 – April 2013

• A federal regulatory decision made on April 10, 2013 regarding vectoring technology and the prices charged for "last mile" access has the potential to further entrench the market dominance of the leading ISP, Deutsche Telekom (see Obstacles to Access).

• A Federal Court of Justice decision in July 2012 placed greater liability on host providers, stipulating that once the provider is made aware of copyright-infringing material, they must take steps to prevent further instances of that material being uploaded to their platform (see Limits on Content).

• In May 2012, amendments to the telecommunication act included a provision that would allow the government to define basic requirements for non-discriminatory data transfer and access with a view of safeguarding net neutrality. However, the government has not yet established any requirements (see Limits on Content).

• Amendments to the telecommunication act also lowered the threshold for public agencies to access individual user data, including sensitive data such as name, address, date of birth, user passwords and dynamic IP addresses (see Violations of User Rights).

Introduction

Germany has a high level of internet and mobile phone penetration, and only the adoption of high-speed broadband is lagging behind other highly developed countries. However, the fact that regulators are allowing the use of vectoring technology to further the development of superfast broadband internet has encountered criticism, given that this technology allows the largest internet service providers (ISPs) to maintain some of their market dominance.

While media and internet freedom principles are generally well-respected, legally codified, and have been repeatedly affirmed in Germany, certain trends over the past year have challenged these principles. In this respect, changes in online copyright enforcement legislation and practices are starting to limit the liability privilege of ISPs and host providers. Intermediaries are now required to implement specific filter and blocking systems in order to prevent further the infringement of copyright protected materials, which might also lead to undesirable private censorship as companies attempt to avoid this liability.

The struggle for net neutrality continues to be an ongoing issue of public debate in Germany. Amendments to the telecommunication act in May 2012 stipulated that the government could require ISPs to offer internet access in a content-neutral fashion, which would be a significant step toward net neutrality. However, the amendment does not automatically safeguard this principle; rather, it requires the government to take further action by defining the minimum quality standards with which ISPs must comply. Meanwhile, German telecommunications companies introduced revised customer contracts that have revived concerns about their non-transparent traffic management practices.

Against a broad coalition of societal actors, legislators also extended the scope of the "stored data inquiry" (Bestandsdatenauskunft) through the amended telecommunication act of 2013. Data protection experts criticize the lower threshold for intrusions of citizens' privacy as disproportionate and are considering another constitutional complaint against the telecommunication act.

Obstacles to Access

Germany's network infrastructure for information and communication technologies is well-developed, with 76 percent of the population in Germany having private internet access. Together with the number of mobile-only internet users, this has resulted in an overall internet penetration rate of 85 percent, which is 10 percentage points above the European Union (EU) average.^[1] However, growth in internet penetration is clearly slowing down, with figures increasing by only 2.5 percentage points in 2012 in contrast to increases of 5-6 points in the years before.^[2] Also, few individuals who currently do not use the internet are planning to obtain access in the future.^[3]

Internet connections in private homes are almost universal, with 93 percent of households having a broadband connection of at least 1 Mbps and only 5 percent still using slower dial-up connections.^[4] The most widely used access technique is still DSL (82 percent), but cable internet connections are becoming more widespread (11 percent).^[5] With regard to high-speed broadband connections, there is a remarkable gap between supply and demand. On the supply side, connections with more than 50 Mbps are available for about 55 percent of households.^[6] On the demand side, adoption is lagging behind: only 9 percent of households actually subscribe to fast connections between 30 and 100 Mbps.^[7] Regarding the take-up of connections of at least 10 Mbps, Germany is also lagging behind internationally with only 33 percent of households having such connections, in comparison to the EU average of 48 percent.^[8] For this reason, the federal regulator has been criticized for supporting controversial vectoring technology instead of focusing on the roll-out of fiber-optic broadband.^[9]

Mobile phone penetration in Germany is almost universal, with a penetration rate of over 132 percent.^[10] The adoption of mobile internet access increased from 28 to 40 percent in early 2013,^[11] which is rather slow by international standards.^[12] While 72 percent of mobile internet users have additional landline access, mobile internet is the only form of internet access for almost a third of these users. This is reflected in a high share of smartphone users (45.1 percent)^[13] and flat rate data contracts (77 percent).^[14] While the availability of basic UTMS connections is good (85 percent of all German households), the coverage of fast LTE technology is still growing in Germany, with half of all households being covered.^[15]

Apart from the overall number of subscribers, there have also been changes in the socio-demographic composition of internet users. While there are still more men than women accessing the internet in Germany (81 percent compared to 70.5 percent), the increase of female users compared to male users was slightly higher in 2012, resulting in a smaller gender-difference of 10.5 percentage points compared to 11.8 percent in 2011. Internet penetration is particularly high in the age group 40 and younger (94.1 percent) but, in comparison, relatively low in the age group 70 and above (28.2 percent).^[16] However, it is worth noting that in the older cohorts there is the highest growth rates of internet usage; for example, the internet penetration of those older than 70 has increased by 3.6 percent since 2011.^[17]

Differences in internet usage depending on formal education did not significantly change in the past year; therefore, the mismatch between people with low and high levels of formal education using the internet is still about 20 percent. This phenomenon is confirmed by a comparison of net household incomes. Households with less than €1,000 net income per month have a 54.2 percent penetration rate, whereas those with more than €3,000 net income have a penetration rate of 92.7 percent.^[18] Furthermore, differences in internet usage exist between Germany's western region (78 percent) and the eastern region that once constituted the communist German Democratic Republic (70 percent). This difference decreased by one percent from 2011 to 2012.^[19] Nevertheless, the gap in internet penetration between urban states like Hamburg, Berlin, and Bremen and rural states such as Lower-Saxony decreased from 16 percent in 2011 to only 13 percent in 2012.^[20]

Prices for flat rate broadband internet have been relatively stable over recent years and now range from €20 to €40 ($26 to $53) which is regarded as affordable compared to the average income per household of €3,578, and ranks below average prices in OECD countries.^[21] Nevertheless, as the stark differences in internet usage in relation to income indicate, the price level constitutes a barrier for people with low incomes and the unemployed. Although the Federal Court of Justice ruled that access to the internet is fundamental for everyday life, costs for internet access are not adequately reflected in basic social benefits.^[22] Telecommunication services have become slightly less expensive, decreasing by 2.7 percent,^[23] and the costs for mobile internet usage and telephones have decreased by 3.5 percent.^[24]

The telecommunications sector was privatized in the 1990s with the aim of fostering competition. Over the past decade, market consolidation has led to a competitive environment dominated by large companies both in fixed-line as well as mobile internet access; consequently, several smaller ISPs have been forced out of business. The incumbent Deutsche Telekom's share of the broadband market is 45 percent. Other relevant ISPs are 1&1-United Internet and Arcor-Vodafone (each with 12 percent of the market), O2-Telefónica (9 percent), and cable companies Unity Media (8 percent) and Kabel Deutschland (6 percent).^[25]

There are four general carriers for mobile internet access: T-Mobile, Vodafone, E-Plus, and O2- Telefónica. In 2012, T-Mobile regained its market leadership from Vodafone, gaining a 32 percent market share compared to Vodafone's 30 percent. The smaller providers, E-Plus and O2-Telefónica, have been steadily gaining market shares, with 21 percent and 17 percent of the market, respectively.^[26] The mobile market is seen as one of the most competitive in the EU,^[27] though competition of mobile services in downstream markets is limited, since most German mobile providers contractually prohibit services such as Voice over Internet Protocol (VoIP) or even instant messaging.^[28] The Body of European Regulators for Electronic Communications (BEREC) is investigating this widespread practice of carriers across Europe and discussing possible regulatory interventions.^[29]

Internet access, both broadband and mobile, is regulated by the Federal Network Agency for Electricity, Gas, Telecommunications, Post, and Railway (Bundesnetzagentur or BNetzA) operating under the supervision of the Federal Ministry of Economics and Technology. The president and vice president of the agency are appointed for five-year terms by the German federal government, following recommendations from an advisory council consisting of 16 members from the German Bundestag and 16 representatives from the Bundesrat. The German Monopolies Commission and the European Commission (EC) have both criticized this highly political setting and the concentration of important regulatory decisions in the presidential chamber of the Federal Network Agency.^[30] Similarly, the European Court of Justice (ECJ) and the EC noted that the regulation of data protection and privacy by agencies under state supervision does not comply with the EU Data Protection Directive 95/46/EC.^[31]

In addition to such institutional concerns, regulatory decisions by the BNetzA have been criticized for providing a competitive advantage to Deutsche Telekom, the former state-owned monopoly.^[32] The most recent examples are the agency's decisions on April 10, 2013 to allow a slight increase in the price that Telekom charges competitors for the "last mile"^[33] and to support controversial vectoring technology, which in turn manifests its dominant position regarding the last mile. Vectoring can boost the bandwidth of DSL connections on existing copper lines but requires one operator to manage the whole bundle, in effect limiting the unbundling of the local loop and thus privileging, under specific circumstances, the market leader.^[34]

Limits on Content

Blocking of websites or internet content rarely takes place in Germany.^[35] In 2012-2013, there were no publicly known incidents of censorship directly carried out by state actors. Since there is also no significant filtering of text messages or e-mail communication, the overall scale and sophistication of censorship has remained stable and on a non-significant level. YouTube, Facebook, Twitter and international blog-hosting services are freely available.

Content blocking or filtering practices enforced by corporate actors have been discussed for some time. The ongoing dispute between YouTube and GEMA (German Society for Musical Performance and Mechanical Reproduction)^[36] indicates that private entities substantially shape the availability of online content: 61.5 percent of the most popular music videos on YouTube are blocked in Germany.^[37] Since 2009, YouTube has refused to pay for a license for copyright-protected music videos disseminated on its platform, and instead shows an error message saying that the video is not available in Germany because GEMA has not granted the publishing rights.^[38] YouTube has also been legally required to remove protected content upon request under the breach of duty of care.^[39] GEMA holds a de facto monopoly because it exercises rights exclusively and considers it a copyright violation when YouTube uses "the rights administered by GEMA without paying any compensation to the copyright owners,"^[40] and consequently sues Google for damages.^[41] Google has raised concerns about undesired harms for freedom of expression.^[42] The issue is most likely to continue in the courts as both parties filed appeals in May 2012.^[43]

In a few cases, private content regulation practices based on the enforcement of corporate terms of service were the subject of controversial public discussions. For example, in March 2013 a German radio host's critical Facebook posts about the Catholic Church and the new pope's attitude toward same-sex marriage were deleted by Facebook without offering any reasons or the possibility to restore the post.^[44] The scale and scope of such practices remain non-transparent.

New evidence has confirmed that ISPs across Europe regularly use deep packet inspection (DPI) for the purposes of traffic management, but also to throttle peer-to-peer traffic. Users are especially affected by P2P-related restrictions in the mobile market.^[45] In Germany, there is a clear lack of transparency regarding the scope of traffic management, particularly surrounding the use of DPI, since ISPs are not required to provide the public with such information.

While there is no systematic blocking and filtering of content by the state, instances of the courts or public authorities ordering the deletion of certain content have become common. In October 2012, the U.S.-based company Twitter complied with a request to close the account of a neo-Nazi group deemed illegal by German authorities.^[46] Twitter did not delete the account but started to restrict access to it for German users only.^[47] This action was the first application of Twitter's new policy, introduced in January 2012, to block content and accounts on a country-by-country basis in order to balance free speech principles with its compliance of local laws. The specific decision did not arouse much controversy in Germany, and has rather been regarded as a transparent way to minimize censorship.^[48]

The autocomplete function of Google's search engine has been repeatedly subject to scrutiny. In September 2012, Germany's former first lady sued Google for defamation over suggested words. The lawsuit demanded that Google delete 85 suggested words, and furthermore, requested the deletion of search results indexing articles that cover the issue. Google partly complied by deleting eight of the 3,000 results from the index due to unlawful and false statements of fact.^[49] Following a considerable history of court rulings,^[50] in May 2013 the Federal Court of Justice, in a different case, ruled that Google could be held liable, at least under some circumstances, for the infringement of personal rights through its autocomplete function.^[51]

There is no censorship prior to the publication of internet content. On the other hand, figures released by ICT corporations concerning the amount of content removal requests received from governments, public authorities, or copyright owners indicate that post-publication content removal is used extensively. Microsoft has started to report the numbers of removal requests on a country-by-country basis. Notably, none of those requests resulted in a disclosure of customer content.^[52] According to Google's latest transparency report covering the period from July to December 2012, the company received 231 requests from the German government and public authorities.^[53] Based on absolute numbers, Germany ranks third on a list of 65 countries that issued requests for removal of content, following Brazil and the United States. To an unprecedented degree, requests were mandated by court orders (192 requests), most commonly for defamation reasons. The total number of items requested to be removed was 1,105. The most requested items to be removed were for defamation, adult content, and hate speech matters. German youth protection authorities have continuously requested the removal of content deemed to violate German youth protection legislation, especially videos on YouTube.^[54]

The protection of minors constitutes an important legal framework for the regulation of online content.^[55] Youth protection on the internet is principally addressed by states through the Interstate Treaty on the Protection of Human Dignity and the Protection of Minors in Broadcasting (JMStV), which bans content similar to that outlawed by the criminal code, such as the glorification of violence and sedition.^[56] A controversial provision of the JMStV reflecting the regulation of broadcasting media mandates that adult-only content on the internet, including adult pornography, must be made available in a way that verifies the age of the user.^[57] Compliance with the interstate agreement is supervised by the Commission for Youth Protection Relating to Media (KJM) and supported by a joint body, jugendschutz.net, which operates a hotline for complaints. Notably, the JMStV enables the blocking of content if other actions against offenders fail and if such blocking is expected to be effective. Offending websites hosted outside of Germany are put on blacklists that are made available for privately developed filtering software. Members of the self-regulatory body, Voluntary Self-control for Multimedia Service Providers (FSM), are committed to removing blacklisted websites from their search results. In February 2013, the Federal Minister of Family Affairs, Senior Citizens, Women and Youth, in cooperation with internet industry partners and jugendschutz.net, introduced a proxy server meant to ensure safer internet use for children.^[58] The software is offered at no charge for individual download and is available for mobile devices as well as computers. Presently, two filtering software solutions for youth protection are officially approved by the KJM.^[59]

The liability of platform operators for illegal content is regulated by the telemedia act. The law distinguishes between full liability for owned content and limited "Breach of Duty of Care" (Stoererhaftung) of access providers and host providers for third party content.^[60] Although access and host providers^[61] are not generally responsible for the content they transmit or temporarily auto store, there is a certain tension between the underlying principles of liability privilege and that of secondary liability.^[62] Principally, ISPs are not required to proactively control or review the information of third parties on their servers; they become legally responsible as soon as they gain knowledge of violations or violate reasonable audit requirements.^[63]

In 2012, court rulings limited the liability privilege of ISPs by further specifying requirements, responsibilities, and obligations. Notably, these have commonly occurred in relation to copyright enforcement online. In this respect, additional blocking and filter obligations of host providers have been put in more concrete terms by the Federal Court of Justice (Bundesgerichtshof, BGH) in the "Alone in the Dark" case.^[64] In the specific instance, the game publisher Atari sued the file hosting service Rapidshare for copyright violations concerning the video game "Alone in the Dark." Although the judges did not hold Rapidshare liable for a direct infringement, they saw a violation of the service's monitoring obligation under the breach of duty of care. Once the file hosting service was notified of one infringing copy, the court said, it should have proactively controlled its service for other copies of the same material.^[65] Hosting services are now supposed to implement technically and economically reasonable mechanisms in order to prevent any further violations of the respective copyright.

In addition to the mere deletion of relevant data, the court also deemed manual post-filtering by words and the control of external link collections technically reasonable. Depending on the current technical standard, automated control mechanisms can also be considered.^[66] Furthermore, ISPs are obliged to disclose customer information for prosecutions of copyright infringement, even though the person may not have infringed copyrights for commercial purposes.^[67] A special requirement to review the content on any violations of rights was also ruled in a case where a blogger integrated a YouTube video onto his website.^[68] Whereas linking to other websites is regarded as unproblematic, embedding content, primarily videos from other sources, could cause liability risks for the provider.^[69]

An important exception to the liability privilege concerns wireless networks.^[70] Because of a highly disputable ruling against the existing liability privilege by the Federal High Court in 2010, legislative initiatives from states and political parties now seek to modify the secondary liability of local Wi-Fi operators.^[71]

Content hosts have also been pursued for further investigations for opinions expressed by third parties on their platforms, as single cases indicate. In these cases, authorities have required platform owners to provide the real names of users who were prosecuted for defamation reasons. They even went so far as to search the editorial office of a newspaper, which was later ruled as being unlawful,^[72] and to order a coercive detention for an online editor because he refused to provide the user's name.^[73] In the latter case, the editor invoked his right to refuse testimony and has appealed to the Federal Constitutional Court (Bundesverfassungsgericht, BVerfG).

The principle of proportionality has constitutional status in Germany to which public authorities must comply. All means taken by the state against its citizens must remain proportional to the ends pursued. The interplay between the Ministry of Justice, the national data protection officer, the association of internet service providers (Eco), and the internet community effectively hold the bodies involved accountable.

Court proceedings are generally public. While a comprehensive list of all content blocking or deletion orders is not available, the media generally covers such measures. One important exception in reporting concerns the indexes of internet services of the KJM and the Federal Review Board for Media Harmful to Young People (BpJM), which are kept secret.^[74]

There is no systematic self-censorship in the German press; however, certain incidents signal that press companies are becoming more risk-averse when making decisions on the content they intend to publish through private app stores.^[75] Furthermore, there are more or less unspoken rules reflected in the publishing principles of the German press.^[76] The penalty code and the JMStV prohibit content in a well-defined manner (such as child pornography, racial hatred, and the glorification of violence). The JMStV also regulates adult content that is potentially harmful to minors, stipulating that content inappropriate for certain age groups must be regulated to prevent access by children or young persons.

While the degree to which political actors can successfully pressure online news outlets to exclude certain information from their reporting is still insignificant, there have at least been attempts to delete critical information on the internet. The German Bundestag asked a blog to delete an expert report on corruption among parliamentarians because of an alleged copyright infringement. The platform owner refused to do so without further consequences.^[77] Additionally, the Federal Ministry of Defense has taken legal steps against a newspaper,^[78] demanding that it delete a set of leaked mission reports covering Afghanistan operations of the federal armed forces (Bundeswehr), based on alleged copyright infringement.^[79]

With the latest amendment of the telecommunications act (Telekommunikationsgesetz, TKG) enacted in May 2012, the principle of net neutrality has been legally codified (§ 41a TKG), but is still not entirely safeguarded.^[80] The law authorizes the government to define basic requirements for non-discriminatory data transfer and content access, but it does not require the government to take any further action. The German Federal Network Agency (Bundesnetzagentur, BNetzA) principally supports net neutrality, but instead of safeguarding it legally, the national regulator favors new business models based on price discrimination and differentiated classes of service as long as ISPs are transparent about their policies and give customers a choice.^[81] The lack of concrete action on the part of the German government has also encountered criticism, especially when two of the market-leading telecommunications companies, Vodafone and Deutsche Telekom, announced new terms for customer contracts. Telekom, for example, announced that it would place limits on customers' high-speed data transfer per month, but that its own services, such as television and movie-streaming services, would not count toward customers' data transfer limits.^[82] Treating in-house services differently in particular has raised concerns in terms of competition and consumer protection by governmental representatives who also declared that these practices should be scrutinized more closely.^[83]

Germany is home to a vibrant internet community and blogosphere. Local and international media outlets and news sources are generally accessible and represent a diverse range of opinions.^[84] Policies affecting internet regulation, data protection, or surveillance enjoy increasing public attention and media coverage. Internet-related topics are growing increasingly popular, also due to increased attention among political institutions. All political parties now have internet experts. Whereas in early 2012 the German Pirate Party could continue its remarkable success in state elections,^[85] their popularity has recently been decreasing.^[86] After three years of work, the multi-stakeholder Commission of Inquiry (Enquete-Kommission) on Internet and Digital Society^[87] released its final report in April 2013.^[88] Among other things, the commission calls for the establishment of a permanent internet commissioner at the federal level.^[89]

In 2012, an example of the growing discursive power of the internet community revolved around a discussion which started on Twitter. Under the hashtag #aufschrei ("outcry"), people started to tweet about everyday sexism against women. The discussion soon left the Twitter-sphere and became a nation-wide societal debate.^[90] Additionally, activists are waging online campaigns in the fight for net neutrality^[91] against the telecoms Vodafone^[92] and Deutsche Telekom, and have already been partly successful.^[93] At the same time, multiple laws that restrict internet freedom, such as some of the amendments to the telecommunication act, were passed despite strong criticisms by a broad coalition of societal actors.

Violations of User Rights

Germany is considered to be one of the most privacy-conscious countries; however, the 2012 amendments to the telecommunication act included a provision which allows more public agencies access to user data, and lowers the threshold for this access from investigations into serious crimes to misdemeanors and administrative offences, raising concerns about the trajectory for privacy protections in the country.

The German Basic Law guarantees freedom of expression and freedom of the media (Article 5) as well as the privacy of letters, posts, and telecommunications (Article 10). These articles generally safeguard offline as well as online communication. In addition, a groundbreaking 2008 ruling by the Federal Constitutional Court established a new fundamental right warranting the "confidentiality and integrity of information technology systems" grounded in the general right of personality guaranteed by Article 2 of the Basic Law.^[94]

These rights were contested in the political aftermath of the September 2001 terrorist attacks in the United States (cf. the 2001 Act for Limiting the Secrecy of Letters, the Post, and Telecommunications).^[95] However, after several cases concerning the infringement of the rights of journalists, a Federal Constitutional Court ruling in February 2007 set a strong precedent for the protection of journalists' sources.^[96] On March 29, 2012, in response to this ruling, the Federal Parliament issued the Act on Strengthening Press Freedom (Gesetzes zur Stärkung der Pressefreiheit im Straf- und Strafprozessrecht, PrStG), which protects journalistic sources and establishes high barriers for searching and seizing journalists' property.^[97] In addition to the aforementioned rulings on the liability privilege of providers, these developments constitute a trend of strengthening media freedom in Germany. In particular, the rulings of the Federal Constitutional Court continue to promote freedom of expression.

Online journalists are generally granted the same rights and protections as journalists in the print or broadcast media. Although the functional boundary between journalists and bloggers is starting to blur, the German Federation of Journalists maintains professional boundaries by issuing press cards only to full-time journalists. Similarly, the German Code of Criminal Procedure grants the right to refuse testimony solely to individuals who have "professionally" participated in the production or dissemination of journalistic materials.^[98]

The German Criminal Code (StGB) includes a paragraph on "incitement to hatred" (§ 130 StGB), which penalizes calls for violent measures against minority groups and assaults on human dignity.^[99] The German people mostly regard this provision as legitimate, particularly because it is generally applied in the context of holocaust denials.^[100]

Website owners or bloggers are not required to register with the government. However, due to clauses in both the Telemedia Act (Telemediengesetz, TMG) and the Interstate Treaty on Broadcasting (Rundfunkstaatsvertrag, RFStV), most websites and blogs need to have an imprint naming the person in charge and contact address. The anonymous use of e-mail services, online platforms, wireless internet access points, and public telephone booths are legal. Although the Federal Minister of the Interior and some other members of the conservative parties have repeatedly expressed their disapproval of anonymity on the internet,^[101] this situation is not likely to change. With explicit references to the constitution, several courts have repeatedly affirmed the right to anonymity and its necessity for the exercise of the constitutional right to freedom of expression.^[102]

The right of anonymity notwithstanding, the telecommunication act of 2004 stipulates that the purchase of SIM cards requires registration, including the purchaser's full name, address, international mobile subscriber identity (IMSI), and international mobile station equipment identity (IMEI) numbers if applicable.^[103] In this way, the growing penetration of mobile internet threatens to further erode the possibility of anonymous communication.

The use of proxy servers is common in Germany, but more for the purpose of circumventing copyright restrictions than to avoid censorship. There are no figures available for the extent of their use.

Excessive interceptions by secret services formed the basis of a 2008 Federal Constitutional Court ruling, which established a new fundamental right warranting the "confidentiality and integrity of information technology systems." The court held that preventive covert online searches are only permitted "if factual indications exist of a concrete danger" that threatens "the life, limb, and freedom of the individual" or "the basis or continued existence of the state or the basis of human existence." The court also established that any covert infiltration of information technology systems requires a court order and that statutes permitting such infiltrations must "contain precautions in order to protect the core area of private life."^[104] Based on this Constitutional Court ruling, the Federal Parliament passed an act in 2009 authorizing the Federal Bureau of Criminal Investigation (BKA) to conduct covert online searches to prevent terrorist attacks on the basis of a warrant.^[105] In addition to online searches, the act authorizes the BKA to employ methods of covert data collection, including dragnet investigations, surveillance of private residences, and the installation of a program on a suspect's computer that intercepts communications at their source.

The amended telecommunication act of 2013 reregulates the "stored data inquiry" requirements (Bestandsdatenauskunft).^[106] Under the new provision, approximately 250 registered public agencies, among them the police and customs authorities, are authorized to request from ISPs both contractual user data and sensitive data, such as PINs, passwords, and dynamic IP addresses. While the 2004 law restricted the disclosure of sensitive user data to criminal offenses, the amended act extends it to cases of misdemeanors or administrative offenses. Additionally, whereas the disclosure of sensitive data and dynamic IP addresses normally requires an order by the competent court, contractual user data (such as the user's name, address, telephone number, and date of birth) can be obtained through automated processes. The requirement of judicial review (Richtervorbehalt) has been subject to two empirical studies, both of which found that in the majority of cases a review by a judge does not take place.^[107] Data protection experts criticize the lower threshold for intrusions of citizens' privacy as disproportionate. Two members of the Pirate Party and a lawyer who had already filed the complaint against the data retention law in 2007 have filed a new constitutional complaint against the telecommunication act.^[108]

Telecommunications interception by state authorities for reasons of criminal prosecution is regulated by the code of criminal procedure (StPO) and is understood as a serious interference with basic rights. It may only be employed for the prosecution of serious crimes for which specific evidence exists and when other, less-intrusive investigative methods are likely to fail. According to recent statistics published by the Federal Office of Justice, there were a total of 21,118 orders for telecommunications interceptions in 2011, of which 1,345 concerned internet communications.^[109] This is an increase of about 35 percent compared to 2010. There were also a total of 14,153 orders requesting internet traffic data in 2011.^[110] Surveillance measures conducted by the secret services under the Act for Limiting the Secrecy of Letters, the Post, and Telecommunications exceed these figures. For 2011, the competent Parliamentary Control Panel reported that a total of 2.8 million telecommunications – most of them e-mail – were scanned, of which only 290 were considered relevant.^[111] The e-mail contents were scanned for keywords relating to certain "areas of risk," namely international terrorism, proliferation of arms and other military technology, and human smuggling.^[112]

For purposes of criminal prosecution, since 2009, the German police have used Trojan-like pieces of software to spy on criminal suspects. The Trojan, programmed by the commercial manufacturer DigiTask, not only enables the police to legally eavesdrop on encrypted conversations but also has the potential for a wider range of actions, some of which are illegal. Among these illegal encroachments are the searching of digital devices, logging of keystrokes, and planting of "backdoors" that allow for the remote installation of additional software or insertion of false evidence. Five German states admitted to the use of the "Federal Trojan" (Bundestrojaner) but denied the use of any illegal functions.^[113] Due to the considerable public criticism following the "Bundestrojaner affair," the Federal Police decided to develop in-house capacity to produce its own lawful intrusion software. More controversially, the Federal Police have purchased FinFisher/FinSpy IT, another commercial spyware, for the "transition period" until its own solution is operational.^[114]

Recent evidence shows that German police authorities regularly make use of radio cell queries for criminal investigation.^[115] In the states of Berlin and Saxony, for example, radio cell queries were used in 2012 in the context of criminal investigations for which millions of data records were collected without informing the individuals affected, as required by law.^[116] The extensive use of radio cell queries has raised questions of proportionality.^[117]

A constitutional complaint filed by ISPs in 2012 successfully challenged the existing provisions that mandated ISPs to retain customer data and provide information on users' contractual data, PIN numbers, keys, and passwords to law enforcement agencies and secret services upon request.^[118] The Federal Constitutional Court held that these provisions breach the individual right of self-determination over personal information of the Basic Law. The Federal Constitutional Court particularly criticized as partly unconstitutional the duty of telecommunications providers to provide information about passwords and other access protection measures.^[119]

Following the EU Data Retention Directive, the 2007 Law on the Revision of Telecommunications Monitoring and other Covert Investigation Measures and on the Implementation of Directive 2006/24/EC mandated that ISPs and mobile phone companies have to retain traffic data for six to seven months to facilitate criminal investigations. A constitutional complaint led to the repeal of the national data retention provisions in 2010.^[120] The German government has not transposed the EU Data Retention Directive within the stipulated timeframe into German law and does not intend to do so.^[121] On May 31, 2012, the European Commission filed a complaint against the German government due to non-compliance, proposing that the court impose a daily penalty payment of €315,036.54.^[122]

A 2012 survey by the German Federal Network Agency shows that, in the absence of a legal obligation for data retention, the four major mobile communications providers in Germany continue to store user data for a period of between 7 and 210 days.^[123]

German authorities also request user data from internet content providers. From July-December 2012, Google reported an increasing number of requests (1,550 compared to 1,426 requests for the same period in 2011), putting Germany at number four on the list of the countries that request the most user data, behind the United States, India, and France.^[124] Microsoft reported 8,419 requests, affecting 13,226 accounts. In 7,088 of these cases (84.2 percent), at least "some customer data" was disclosed. Skype data has been listed separately: in 2012, there were 686 requests, affecting 2,646 accounts.^[125]

There are no legal obligations to report security breaches. However, according to the Federal Ministry of Interior, approximately 1,100 cyberattacks took place in 2012. As a response to these estimates, the ministry has developed a "Cyber Security Strategy for Germany," thereby following the global trend to improve the security of information networks in a proactive manner.^[126] On June 16, 2011, Germany's Interior Minister Hans-Peter Friedrich introduced the new National Cyber Response Centre tasked to optimize the cooperation between several federal authorities and agencies such as the Federal Office for Information Security (BSI) and the Federal Office for the Protection of the Constitution (BfV). The Cyber Response Centre is a sub-unit of the Ministry of Interior with 10 permanent employees.^[127] In addition, a National Cyber Security Council was founded in 2011. It consists of government officials and associated business representatives who meet at least three times a year. Academic experts can be invited if required.^[128] In March 2013, the Federal Ministry of the Interior proposed a law to improve the security of information networks which would have made it a mandatory obligation for telecommunication firms and critical infrastructure operators to report security breaches to the Federal Office for Information Security (BSI).^[129] The Federal Ministry of Economics and Technology blocked the legislative draft in the early consultation phase. Digital rights advocates criticized the legislative proposal because it did not include a notification of users in case of security breaches. Industry associations, on the other hand, feared potential costs and bureaucratic burdens of notifying the Federal Office for Information Security.^[130]

In June 2012, the media reported the establishment of a new cyberwarfare unit within the German military forces (Bundeswehr). However, the unit is said to be poorly staffed compared to its international allies.^[131]

Notes

---

1 Eurostat, "Broadband and Connectivity – Households", April 29, 2013, http://appsso.eurostat.ec.europa.eu/nui/show.do?dataset=isoc_bde15b_h&lang=en. Official International Telecommunication Union (ITU) data places the internet penetration rate for 2012 at 84 percent. See International Telecommunication Union (ITU), "Percentage of individuals using the Internet," 2012, accessed July 8, 2013, http://www.itu.int/ITU-D/ICTEYE/Indicators/Indicators.aspx.

2 Birgit van Eimeren/Beate Frees, "76 Prozent der Deutschen online – neue Nutzungssituationen durch mobile Endgeräte. Ergebnisse der ARD/ZDF-Onlinestudie 2012" [76 percent of Germans are online – new usage situations by mobile devices], Media Perspektiven 7-8/2012, p. 362-379, http://www.ard-zdf-onlinestudie.de/fileadmin/Online12/0708-2012_Eimeren_Frees.pdf; Other surveys report up to 79 per cent, cf.: Initiative D21, "(N)Onliner Atlas 2012. Basiszahlen für Deutschland" [Baseline numbers for Germany], 2012. http://www.initiatived21.de/wp-content/uploads/2012/06/NONLINER-Atlas-2012-Basiszahlen-f%C3%BCr-Deutschland.pdf; Forschungsgruppe Wahlen, "Internet-Strukturdaten. Repräsentative Umfrage" [Structural internet data. representative survey], IV quarter of 2012, http://www.forschungsgruppe.de/Aktuelles/Internet-Strukturdaten/web_IV_12_1.pdf.

3 Initiative D21, 2012, p. 4.

4 Statistisches Bundesamt [Federal Statistical Office], "28 Millionen Haushalte in Deutschland haben einen Breitbandanschluss" [28 million households in Germany have a broadband connection], press release No. 474, December 19, 2011, https://www.destatis.de/DE/PresseService/Presse/Pressemitteilungen/2011/12/PD11_474_63931.html.

5 Ibid.

6 TÜV Rheinland Consulting, "Bericht zum Breitbandatlas Ende 2012 im Auftrag des Bundesministeriums für Wirtschaft und Technologie (BMWi)" [Report of the Broadband Atlas End of 2012 on behalf of the Ministry of Economics and Technology], Part 1, 2012, p. 6, http://www.zukunft-breitband.de/DE/Service/publikationen,did=559116.html.

7 Kai Lukas/Almuth Marx/Bernd Oliver Schöttler/Christoph Sudhues, "Abschlussbericht 'Dienstequalität von Breitbandzugängen' Studie im Auftrag der Bundesnetzagentur" [Final report 'Service quality of broadband access' Study on behalf of the Federal Network Agency], April 9, 2013, p. 54, http://www.initiative-netzqualitaet.de/fileadmin/user_upload/Abschlussbericht_BNetzA_Studie_Dienstequalitaet_Breitbandzugaenge.pdf.

8 European Commission, Digital Agenda Scoreboard, http://bit.ly/1h9FS4d.

9 Die Telekom forciert VDSL-Vectoring statt Glasfaser" [Fiber to the Neverland. DT pushes VDSL-Vectoring instead of Fibre], c't 10/2013, April 29, 2013, pp. 18-21, http://heise.de/-1847272; Volker Briegleb, "Vectoring: Regulierer genehmigt VDSL-Turbo" . heise-online, April 09, 2013, http://heise.de/-1837933.

10 Bundesministerium für Wirtschaft und Technologie [Federal Ministry of Economics and Technology], "Monitoring-Report Digital Economy 2012", November 2012, p. 52 http://bmwi.de/EN/Service/publications,did=542994.html.

11 Initiative D21/Huawei Technologies Deutschland (Ed.), Mobile Internetnutzung [mobile internet usage], February 2013, p. 8, http://www.initiatived21.de/wp-content/uploads/2013/02/studie_mobilesinternet_d21_huawei_2013.pdf..

12 Bundesministerium für Wirtschaft und Technologie, 2012, p. 66.

13 Bundesministerium für Wirtschaft und Technologie, 2012, p. 53.

14 Bundesministerium für Wirtschaft und Technologie, 2012, p. 66.

15 TÜV Rheinland Consulting, 2012, p. 4. With the allocation of licenses for the next generation mobile standard LTE, the Bundesnetzagentur has obliged the network providers to build the new infrastructure in rural areas first before installing it cities.

16 Initiative D21, 2012, p. 5 ; Forschungsgruppe Wahlen, 2012, cf. fn. 1.

17 Initiative D21, 2012, p. 5.

18 Initiative D21, 2012, p. 5.

19 Forschungsgruppe Wahlen, "Internet-Strukturdaten. Repräsentative Umfrage" [Structural internet data. representative survey], IV quarter of 2011, http://www.forschungsgruppe.de/Umfragen/Internet-Strukturdaten/web_IV_11_1.pdf ; And Forschungsgruppe Wahlen, 2012, cf. fn. 1.

20 Initiative D21, 2012, p. 6.

21 Statistisches Bundesamt [Federal Statistical Office], "Wirtschaftsrechnungen 2010" [Budget Surveys 2010], Subject-matter series 15 series 1, August 2, 2012, p. 13, http://bit.ly/VfYRV7; OECD Broadband Portal, Broadband Prices, September 2011, http://www.oecd.org/sti/broadband/oecdbroadbandportal.htm.

22 Bundesgerichtshof [Federal Court of Justice], "Bundesgerichtshof erkennt Schadensersatz für den Ausfall eines Internetanschlusses zu" [Court awards damages for internet failures], press release 14/13, January 24, 2013, http://juris.bundesgerichtshof.de/cgi-bin/rechtsprechung/document.py?Gericht=bgh&Art=pm&pm_nummer=0014/13. Hartz IV standard rate is €382, of which €2.28 are for Internet access, Cf. Deutscher Bundestag [German Bundestag], Drucksache 17/3404, p. 60, http://dip21.bundestag.de/dip21/btd/17/034/1703404.pdf.

23 Statistisches Bundesamt, "Statistisches Jahrbuch. Deutschland und Internationales" [Statistical Yearbook], 2012, p. 402, https://www.destatis.de/DE/Publikationen/StatistischesJahrbuch/StatistischesJahrbucTITLE012.pdf?__blob=publicationFile.

24 Bundesministerium für Wirtschaft und Technologie, 2012, p. 42.

25 Bundesnetzagentur, "Jahresbericht 2012" [Annual Report 2012], May 6, 2013, http://bit.ly/1eNOUXS. DSLWEB ; "Breitband Report Deutschland Q3 2012" [Broadband Report Germany], http://bit.ly/TvtFOy.

26 Bundesnetzagentur [Federal Network Agency], "Teilnehmerentwicklung im Mobilfunk" [Development of Mobile Subscriptions] , May 13, 2013, http://bit.ly/1h9FtPn; FAZ.net, "T-Mobile ist wieder das beliebteste Handynetz" [T-Mobile is again the most popular mobile phone network], November 13, 2012, http://www.faz.net/-gqi-74br2..

27 European Commission, Digital Agenda for Europe – Scoreboard 2012, p.68. Cf. also the study by Haucaup et al. documenting a fairly competitive market: Haucap/Heimeshoff/Stühmeier, 2010, "Wettbewerb im Deutschen Mobilfunkmarkt" [Competition in the German mobile market], Ordnungspolitische Perspektiven Nr. 4.

28 Ekkehard Kern, "Die Tücken der Smartphone-Verträge" [The pitfalls of smartphone contracts], welt.de, April 8, 2013, http://www.welt.de/finanzen/verbraucher/article115087088/Die-Tuecken-der-Smartphone-Vertraege.html.

29 BEREC, "BEREC publishes net neutrality findings and new guidance for consultation", Press release, May 29, 2012, http://berec.europa.eu/eng/document_register/subject_matter/berec/press_releases/24-berec-publishes-net-neutrality-findings-and-new-guidance-for-consultation. According to this study, at least 20 percent of mobile internet users in Europe experience some form of restriction on their ability to access VoIP services.

30 Monopolkommission [Monopolies Commission], "Telekommunikation 2009: Klaren Wettbewerbskurs halten" [Telecommunication 2009: stay on target in competition], Sondergutachten 56, 2009, p. 75, http://www.monopolkommission.de/sg_56/s56_volltext.pdf; European Commission, "Progress Report on the Single European Electronic Communications Market (15th Report)", COM(2010) 253, p. 196, http://ec.europa.eu/information_society/policy/ecomm/doc/implementation_enforcement/annualreports/15threport/15report_part1.pdf.

31 European Commission, "Data Protection: European Commission requests Germany to ensure independence of data supervisory authority," Press Release, Brussels, April 6, 2011, http://europa.eu/rapid/pressReleasesAction.do?reference=IP/11/407&format=HTML&aged=0&language=EN&guiLanguage=en.

32 European Commission, Progress Report, p. 196. Since the Federal Republic still exercises its rights as a shareholder of Deutsche Telekom (circa 38 percent) through another public law entity, commentators see a potential conflict of interest; Christian Schmidt, "Von der RegTP zur Bundesnetzagentur. Der organisationsrechtliche Rahmen der neuen Regulierungsbehörde" [From RegTP to Federal Network Agency. The organizational framework of the new regulator], Die Öffentliche Verwaltung 58 (24), 2005, p. 1028.

33 ZDNet, "Neuer Vorschlag der Bundesnetzagentur für TAL-Entgelte erntet Kritik" [Network Agency's Plans for Local Loop Unbundling Charges is criticized strongly], March 28, 2013, http://www.zdnet.de/88149343/neuer-vorschlag-der-bundesnetzagentur-fur-tal-entgelte-erntet-kritik/. An international tariff comparison in 2011 showed that the price level in Germany is one of the highest in Europe: Bundesnetzagentur [Federal Network Agency], "International Tariff Comparison", 2011, http://bit.ly/19a3uAJ.

34 Richard Sietmann, "Fiber to the Neverland. Die Telekom forciert VDSL-Vectoring statt Glasfaser" [Fiber to the Neverland. DT pushes VDSL-Vectoring instead of Fibre]. c't 10/2013, April 29, 2013, pp. 18-21, http://heise.de/-1847272.

35 Due to substantial criticism by activists and NGOs that provoked an intense political debate, the 2010 law on blocking websites containing child pornography, the Access Impediment law (Zugangserschwerungsgesetz), never came into effect and was finally repealed by the German parliament in December 2011.

36 Collecting societies are private organizations at the national level in Germany authorized by the Copyright Administration Act. Although they act under the supervision of the German Patent and Trademark Office, they belong to the private sector. The foundation requires an exemption from the antitrust laws by the Federal Cartel Office.

37 Compared to 0.9 per cent in the United States and ca. 1 per cent in Austria and Switzerland. Cf. sueddeutsche.de, "Diese Kultur ist in Deutschland leider nicht verfügbar" [This culture is not available in Germany], January 28, 2013, http://sz.de/1.1584813.

38 GEMA demands 0.375 cents per retrieval.

39 LG Hamburg [Regional Court Hamburg], judgment of April 20, 2012, Az. 310 O 461/10, http://openjur.de/u/311130.html ; cf. also EDRI, "YouTube loses a case in Germany to collective society Gema", April 25, 2012, http://www.edri.org/edrigram/number10.8/youtube-gema-case.

40 GEMA, "GEMA and YouTube", accessed May 20, 2013, https://www.gema.de/en/press/popular-subjects/youtube/browse/4.html.

41 Süddeutsche.de, "Streit mit Youtube: Gema schaltet Schiedsstelle ein" [Dispute with Youtube: Gema calls in arbitration body], January 10, 2013, http://sz.de/1.1570166.

42 In particular Google argues that because the GEMA doesn't provide a list on the complete repertoire they licensed, most music videos have been blocked in order to avoid financial risks. cf. http://www.djv-bb.de/cms/nachrichten/2013-02-16_GEMA_YouTube_Pressefreiheit.php.

43 Süddeutsche.de, Gema legt Berufung gegen YouTube-Urteil ein [Gema files an appeal against YouTube-jugdement], May 22, 2012, http://sz.de/1.1362833.

44 Tina Kulow, "Was ist mit dem Post von Domian passiert?" [What has happened with Domain's post?], March 19, 2013, https://www.facebook.com/notes/tina-kulow/was-ist-mit-dem-post-von-domian-passiert/625428644149658.

45 BEREC, "A view of traffic management and other practices resulting in restrictions to the open Internet in Europe. Findings from BEREC's and the European Commission's joint investigation," May 29, 2012, http://ec.europa.eu/digital-agenda/sites/digital-agenda/files/Traffic%20Management%20Investigation%20BEREC_2.pdf..

46 The group 'Besseres Hannover' [Better Hanover] has been monitored by the German police for some time and finally banned by the state's interior ministry. Cf. Twitter Inc., "Transparency Report. Removal Requests July 1 – December 31, 2012", 2013, https://transparency.twitter.com/removal-requests-ttr2..

47 Twitter's general counsel, Alex MacGillivray has announced the issue on Twitter: Alex MacGillivray, October 18, 2012, https://twitter.com/amac/status/258745846584188928..

48 Twitter reported the case to chillingeffects.org and has made the request by German police authority publicly available: Chilling Effects, "German Police ask Twitter to Close Account", https://www.chillingeffects.org/notice.cgi?sID=625342.

49 Zeit Online, "Google löscht einige Bettina-Wulff-Einträge" [Google deletes several Bettina-Wulff-entries], November 11, 2012, http://www.zeit.de/digital/datenschutz/2012-11/google-wulf-loeschung.

50 OLG Köln [Higher Regional Court Cologne], judgment of May 10, 2012, Az. 15 U 199/11, http://openjur.de/u/462365.html.

51 BGH [Federal Supreme Court], judgment of May 14, 2013, Az. VI ZR 269/12; Jürgen Kuri/Martin Holland, "BGH zu Autocomplete: Google muss in Suchvorschläge eingreifen" [BGH on autocomplete], May 14, 2013 http://heise.de/-1862062..

52 Microsoft, "2012 Law Enforcement Requests Report", http://www.microsoft.com/about/corporatecitizenship/en-us/reporting/transparency/.

53 Google complied fully or partially with 77 percent of these requests. Google, "Google Transparency Report. Germany. July to December 2012," 2013, http://www.google.com/transparencyreport/removals/government/DE/?p=2012-12.

54 According to the German Report for the first and second half of 2012 (cf. Fn. 51) youth protection authorities requested a total of 451 videos to be removed from YouTube.

55 The legal framework regulating media protection of minors in particular consists of the Law for the protection of children and youth ("Jugendschutzgesetz", JuSchG) of the federal government and the Interstate Treaty on the Protection of Minors in the Media (short "Jugendmedienschutzstaatsvertrag", JMStV).

56 Cf. the respective §§ 130, 131 StGB [Crimical Code]. English translation: http://www.gesetze-im-internet.de/englisch_stgb/englisch_stgb.html.

57 Cf. the respective § 5, Abs. 3 JMStV.

58 KinderServer homepage, accessed August 19, 2013, http://www.kinderserver-info.de/.

59 Monika Ermert/Andreas Wilkens, "Neuer Anlauf für den Jugendmedienschutzstaatsvertrag" [New attempt to reform the Interstate Treaty on the Protection of Minors in the Media], February 22, 2013, http://heise.de/-1809147..

60 In particular: Part 3, §§ 7-10 TMG: liability for own content (§ 7, Abs. 1 TMG); limited liability for access providers (§§ 8, 9 TMG) and host providers (§ 10 TMG).

61 The BGH in particular has developed the principles of limited liability of host providers: BGH [Federal Court of Justice], judgment of October 25, 2011, Az. VI ZR 93/10.

62 Liability privilege means that information intermediaries on the internet such as ISPs are not responsible for the content their customers transmit. Secondary or indirect liability applies when intermediaries contribute to or facilitate wrongdoings of their customers.

63 BGH [Federal Court of Justice], judgment of March 27, 2012, Az. VI ZR 144/11, http://openjur.de/u/405723.html.

64 BGH [Federal Court of Justice], judgment of July 12, 2012, Az. I ZR 18/11, http://openjur.de/u/555292.html.

65 Timothy B. Lee: Top German court says RapidShare must monitor link sites for piracy, July 16, 2012, http://arstechnica.com/tech-policy/2012/07/top-german-court-says-rapidshare-must-monitor-link-sites-for-piracy/.

66 Thomas Stadler, "BGH: Rapidshare muss Wortfilter einsetzen und externe Linksammlungen überprüfen" [Federal Court of Justice: Rapidshare is required to deploy filters by words and to screen external link collections], February 2, 2013, http://www.internet-law.de/2013/02/bgh-rapidshare-muss-wortfilter-einsetzen-und-externe-linksammlungen-uberprufen.html.

67 Bundesgerichtshof [Federal Court of Justice], judgement of April 19, 2012, Az. I ZB 80/11, http://openjur.de/u/438903.html.

68 LG Hamburg [Regional Court Hamburg], judgement of May 18, 2012, Az. 324 O 596/11, http://openjur.de/u/404386.html.

69 Leonhard Dobusch, "Risikofaktor Einbettung: YouTube, Twitter und das Urheberrecht" [Risk factor embedding: YouTube, Twitter and copyright legislation], January 23, 2013, http://netzpolitik.org/2013/risikofaktor-einbettung-youtube-twitter-und-das-urheberrecht/.

70 In 2010, the German Federal High Court sentenced the private owner of a wireless router on the grounds that his or her open network allowed illegal activities. cf. Christopher Burgess, "Three Good Reasons to Lock Down Your Wireless Network," The Huffington Post (blog), June 8, 2010, http://www.huffingtonpost.com/christopher-burgess/three-good-reasons-to-loc_b_599945.html.

71 Cf. Resolution of Bundesrat of October 12, 2012, TOP 12, http://www.bundesrat.de/cln_236/nn_6898/DE/parlamentsmaterial/to-plenum/901-sitzung/to-node.html?__nnn=true) and the debate in the German Bundestag, "Plenarprotokoll 17/201. Stenografischer Bericht. 201. Sitzung Berlin", [Minutes of the pleneray meeting] October 25, 2012, http://dip21.bundestag.de/dip21/btp/17/17201.pdf.

72 beck-aktuell, "LG Augsburg: Durchsuchung einer Redaktion rechtswidrig" [Regional Court Augsburg: Permission to search the editorial office illegal], May 20, 2013, http://beck-aktuell.beck.de/news/lg-augsburg-durchsuchung-einer-redaktion-rechtswidrig.

73 Deutsche Wirtschafts Nachrichten, "Drohung mit Beugehaft wirkt: Online-Portal gibt Nutzer-Daten preis" [Threat of coercive detention works: online portal discloses user data], May 6, 2013, http://deutsche-wirtschafts-nachrichten.de/2013/05/06/drohung-mit-beugehaft-wirkt-online-portal-gibt-nutzer-daten-preis/.

74 The so called parts C and D of the index are not public. BpJM, "Liste der Bundesprüfstelle" [Index of the Federal Review Board for Media Harmful to Young People], http://www.bundespruefstelle.de/bpjm/Jugendmedienschutz/Indizierungsverfahren/verfahrensarten,did=32964.html; See also for in overview in English http://www.bundespruefstelle.de/bpjm/information-in-english.html.

75 In order to avoid later complaints a news magazine was prompted to change the issue cover in the way it deemed to be in line with Apple's terms concerning nudity ; Cf. heise.de, "E-Kiosk-Betreiber Zinio verlangt Zensur auf Android- und iOS-Geräten" [E-kiosk operator Zinio demands censorship on Android and iOS-devices], May 6, 2012, http://www.heise.de/mobil/meldung/E-Kiosk-Betreiber-Zinio-verlangt-Zensur-auf-Android-und-iOS-Geraeten-1568938.html.

76 Presserat [Press Council], "Pressekodex" [press code], version dated March 13, 2013, http://www.presserat.info/inhalt/der-pressekodex/pressekodex.html.

77 Markus Beckedahl, "Der Deutsche Bundestag fordert uns auf, das bisher geheim gehaltene Gutachten zur Abgeordnetenkorruption zu depublizieren" [The German Bundestag calls on us to take down a yet secret report on MPs corruption], October 17, 2012, https://netzpolitik.org/2012/der-deutsche-bundestag-fordert-uns-auf-das-bisher-geheim-gehaltene-gutachten-zur-abgeordnetenkorruption-zu-depublizieren/.

78 David Schraven, "Verteidigungsministerium geht juristisch gegen die WAZ vor" [Ministry of Defense taking legal steps against the WAZ], DerWesten Rechercheblog, April 8, 2013, http://www.derwesten-recherche.org/2013/04/verteidigungsministerium-geht-juristisch-gegen-waz-vor/.

79 David Schraven/WAZ, Die Afghanistan Papiere [The Afghanistan wires], accessed April 10, 2013, http://afghanistan.derwesten-recherche.org/.

80 In particular: § 41a TKG, http://dejure.org/gesetze/TKG/41a.html. The clause simply authorizes the government to define basic requirements for non-discriminatory data transfer and content access, and leaves it to the Bundesnetzagentur to determine minimum quality of service standards – a path the regulator is not likely to go.

81 Cf. minutes of the Expert Meeting on net neutrality of the Parliamentary Inquiry Commission, October 8, 2010, http://bit.ly/1dOvaQI.

82 Rolf Wenkel, "Telekom's planned data limit meets with protest," Deutsche Welle, April 25, 2013, http://www.dw.de/telekoms-planned-data-limit-meets-with-protest/a-16773016.

83 Annett Meiritz/Severin Weiland, "Flat-Rate Fiasco: Telekom Plan to Limit DSL Worries Berlin", http://www.spiegel.de/international/business/government-wary-of-telekom-limits-on-flat-rate-dsl-access-a-896435.html.

84 Bundesinnenministerium [Federal Ministry of the Interior], "Die nationalen Minderheiten in Deutschland" [National minorities in Germany], January 30, 2013, http://bit.ly/13cNnE7.

85 Voter turnout of the Pirate Party in Berlin: 8.9 percent, Saarland: 7.4 percent, Schleswig-Holstein: 8.2 percent, Nordrhein-Westfalen: 7.8 percent

86 Daniel Leisegang, "Piraten auf Schlingerkurs" [Pirates are on slalom course], Blätter 11/2012, p. 11-14, http://www.blaetter.de/archiv/jahrgaenge/2012/november/piraten-auf-schlingerkurs.

87 Cf. the website of the Enquete-Kommission [Parliamentary Inquiry Commission]: http://www.bundestag.de/internetenquete/.

88 Final report of the Parliamentary Inquiry Commission "Internet und digitale Gesellschaft" [The Internet and digital society]: Deutscher Bundestag, Drucksache17/ 12550, April 5, 2013, http://dipbt.bundestag.de/dip21/btd/17/125/1712550.pdf.

89 Der Spiegel, "Net Politics: Report Calls for German Internet Commissioner", April 19, 2013, http://ml.spiegel.de/article.do?id=895412.

90 Silke Wünsch, "Anti-sexism Twitter campaign gains momentum", January 26, 2013, http://dw.de/p/17S9K.

91 Cf. campaign website: http://echtesnetz.de/.

92 Cf. campaign website: http://halbesnetz.de/.

93 The Federation of German Consumer Organizations (vzbv), a non-governmental organization for consumer protection, admonished both companies for disseminating misleading information in their terms and inadmissible contracts. Cf. http://www.vzbv.de/10432.htm ; http://bit.ly/16LO8Xh.

94 BVerfG [Federal Constitutional Court], Provisions in the North-Rhine Westphalia Constitution Protection Act (Verfassungsschutzgesetz Nordrhein-Westfalen) on online searches and on the reconnaissance of the internet null and void, judgment of February 27, 2008, 1 BvR 370/07 Absatz-Nr. (1-267), http://www.bverfg.de/entscheidungen/rs20080227_1bvr037007.html; See also, Press release no. 22/2008, http://www.bundesverfassungsgericht.de/en/press/bvg08-022en.html. For more background cf. Wiebke Abel/Burkhard Schaferr, "The German Constitutional Court on the Right in Confidentiality and Integrity of Information Technology Systems – a case report on BVerfG", NJW 2008, 822", 2009, 6:1 SCRIPTed 106, http://www.law.ed.ac.uk/ahrc/script-ed/vol6-1/abel.asp.

95 This Act enables secret services to intercept, monitor, and record private communications, including the surveillance of journalists under specific conditions. It also restricts journalistic privileges such as the right to refuse to give evidence. "Gesetz zur Beschränkung des Brief-, Post- und Fernmeldegeheimnisses" [Law on the restriction of correspondence, posts and telecommunications secrecy], http://www.gesetze-im-internet.de/g10_2001/index.html.

96 BVerfG [Federal Constitutional Court], "Cicero-Urteil," judgment of February 27, 2007, 1 BvR 538/06, Absatz-Nr. (1-82), http://www.bverfg.de/entscheidungen/rs20070227_1bvr053806.html ; For the European context, see David Banisar, "Speaking of Terror: A Survey of the Effects of Counter-terrorism Legislation on Freedom of the Media in Europe", Council of Europe, 2008, http://www.coe.int/t/dghl/standardsetting/media/Doc/SpeakingOfTerror_en.pdf.

97 Cf. the press release of the Federal Ministry of Justice, March 30, 2012: http://bit.ly/1bhKUOP.

98 Code of Criminal Procedure (StPO), § 53 (1) 5, http://www.gesetze-im-internet.de/englisch_stpo/englisch_stpo.html#p0198.

99 Cf. fn. 54.

100 BVerfG, [Federal Constitutional Court] 1 BvR 2150/08 from November 4, 2009, Absatz-Nr. (1-110), http://www.bverfg.de/entscheidungen/rs20091104_1bvr215008.html ; See also the Press release no. 129/2009 of 17 November 2009, Order of 4 November 2009-1 BvR 2150/08 – § 130.4 of the Criminal Code is compatible with Article 5.1 and 5.2 of the Basic Law, http://www.bverfg.de/pressemitteilungen/bvg09-129en.html.

101 Cf. Anna Sauerbrey, "Innenminister Friedrich will Blogger-Anonymität aufheben" [Federal Minister of Interior wants to abolish anonymity of bloggers], Tagessspiel online, August 7, 2011, http://www.tagesspiegel.de/politik/internet-innenminister-friedrich-will-blogger-anonymitaet-aufheben/4473060.html.

102 E.g. Oberlandesgericht (OLG) Hamm [German Federal Court of Appeals Hamm], File I-3 U 196/10, August 3, 2011, http://www.justiz.nrw.de/nrwe/olgs/hamm/j2011/I_3_U_196_10beschluss20110803.html.

103 Telecommunications Act (TKG), § 111, http://www.bfdi.bund.de/EN/DataProtectionActs/Artikel/TelecommunicationsAct-TKG.pdf?__blob=publicationFile.

104 Bundesverfassungsgericht [Federal Constitutional Court], Provisions in the North-Rhine Westphalia Constitution Protection Act (Verfassungsschutzgesetz Nordrhein-Westfalen) on online searches and on the reconnaissance of the Internet null and void, judgment of February 27, 2008, 1 BvR 370/07; For more background cf. W Abel and B Schafer, "The German Constitutional Court on the Right in Confidentiality and Integrity of Information Technology Systems – a case report on BVerfG", NJW 2008, 822, (2009) 6:1 SCRIPTed 106, http://www.law.ed.ac.uk/ahrc/script-ed/vol6-1/abel.asp.

105 Dirk Heckmann, "Anmerkungen zur Novellierung des BKA-Gesetzes: Sicherheit braucht (valide) Informationen" [Comments on the amendment of the BKA act: Security needs valid information], Internationales Magazin für Sicherheit nr. 1, 2009, www.ims-magazin.de/index.php?p=artikel&id=1255446180,1,gastautor.

106 Bundesrat, "Mehr Rechtssicherheit bei Bestandsdatenauskunft" [More legal certainty for stored data inquiry], Press release no. 251/2013, May 3, 2013, http://www.bundesrat.de/DE/presse/pm/2013/094-2013.html.

107 Two independent studies from by the Universität of Bielefeld (2003: Wer kontrolliert die Telefonüberwachung? Eine empirische Untersuchung zum Richtervorbehalt bei der Telefonüberwachung" [Who controls telecommunication surveillance? An empirical investigation on judicial overview of telecommunication surveillance], edited by Otto Backes and Christoph Gusy, 2003) and Max-Planck-Institut Institute for Foreign and International Criminal Law (Hans-Jörg Albrecht, Claudia Dorsch, Christiane Krüpe 2003: Rechtswirklichkeit und Effizienz der Überwachung der Telekommunikation nach den §§ 100a, 100b StPO und anderer verdeckter Ermittlungsmaßnahmen [Legal reality and efficiency of wiretapping, surveillance and other covert investigation measures], http://bit.ly/wDVLS5) evaluated the implementation of judicial oversight of telecommunication surveillance. Both studies found that neither the mandatory judicial oversight nor the duty of notification of affected citizens are carried out. According to the study by the Max Planck Institute, only 0,4 % of the requests for court orders were denied.

108 Breyer, Patrick, "Verfassungsbeschwerde gegen Bestandsdatenauskunft eingereicht" [Constitutional complaint against stored data inquiry submitted], July 1, 2013, http://bestandsdatenauskunft.de/?p=357.

109 Bundesamt für Justiz [Federal Office of Justice], "Übersicht Telekommunikationsüberwachung (Maßnahmen nach §100a StPO) für 2011," July 23, 2012 [Summary of telecommunication surveillance for 2011] http://bit.ly/18aJxwx.

110 Bundesamt für Justiz, "Übersicht Verkehrsdatenerhebung (Maßnahmen nach § 100g StPO) für 2011" [Summary of traffic data collection], July 23, 2012, http://bit.ly/179zDvJ.

111 These are aggregated figures related to the three areas of risk in which scannings took place according to the report of the Parliamentary Control Panel. Cf. Deutscher Bundestag, Drucksache 17/12773, March 14, 2013, p.7, http://dip21.bundestag.de/dip21/btd/17/127/1712773.pdf. Please note that the annually presented numbers do not refer to the last year but to the year before, i.e. 2011. The Parliamentary Control Panel periodically reports to the parliament and nominates the members of the G10 Commission. The G10 Commission controls surveillance measures and is also responsible for overseeing telecommunications measures undertaken on the basis of the Counterterrorism Act of 2002 and the Amendment Act of 2007. See also: http://www.bundestag.de/htdocs_e/bundestag/committees/bodies/scrutiny/index.html.

112 Cf. the report of the Parliamentary Control Panel: Deutscher Bundestag, Drucksache 17/12773, March 14, 2013, p. 6, http://dip21.bundestag.de/dip21/btd/17/127/1712773.pdf.

113 Deutsche Welle, "Several German states admit to use of controversial spy software," October 11, 2011, http://www.dw.de/dw/article/0,,15449054,00.html.

114 Meister, Andre, "Secret Government Document Reveals: German Federal Police Plans To Use Gamma FinFisher Spyware", netzpolitik.org, January 16, 2013, http://bit.ly/10zhgPA; For the classified document see: "Bericht zur Nr. 10 des Beschlusses des Haushaltsausschusses des Deutschen Bundestages zu TOP 20 der 74. Sitzung am 10. November 2011" [Report of Article 10 of the decision of the Parliament's Budget Committee], https://netzpolitik.org/wp-upload/BMI-Bericht-Sachstand-CC-TK%C3%9C.pdf; EDRI, "Details on German State Trojan programme", October 24, 2012, http://www.edri.org/edrigram/number10.20/details-german–state-spyware-Staatstrojaner.

115 Berlin Commissioner for Data Protection and Freedom of Information, Alexander Dix: "Abschlussbericht zur rechtlichen Überprüfung von Funkzellenabfragen [Report on the legal examination of radio cell queries], p. 16, http://www.datenschutz-berlin.de/attachments/896/Pr__fbericht.pdf?1346753690 . Data are currently available for the states of Berlin and Saxony. In both states radio cell queries were used in 2012 for hundreds of lawsuits for which millions of data records were collected.

116 E.g. in Berlin, in the first half of 2012, 128 lawsuits with radio cell queries and 200 realized queries. In 302 analysed cases (2009-04/2012) more than 6,619,155 data sets have been recorded, shown in this handout of the Berlin Chamber of Deputies, "Ergebnisse der polizeilichen Auswertung -Funkzellenabfragen-" [Results of the police investigation on radio cell queries], https://www.piratenfraktion-berlin.de/wp-content/uploads/2012/08/0480_001.pdf. Cf. also Andre Meister, "Funkzellenabfrage geht weiter: Jeder Berliner ist jedes Jahr zwei Mal verdächtig" [Radio cell queries continue: Each citizen of Berlin is suspected twice a year], August 28, 2012, https://netzpolitik.org/2012/funkzellenabfrage-geht-weiter-jeder-berliner-ist-jedes-jahr-zwei-mal-verdachtig/ ; In Saxony 60 cases have been reported from January to September 2012: Saxon Parliament, Drs 5/10379, http://ws.landtag.sachsen.de/images/5_Drs_10379_-1_1_4_.pdf.

117 Berlin Commissioner for Data Protection and Freedom of Information, 2012, see footnote 35, p. 17 ; Landgericht Dresden [District Court of Dresden] Az. 15 Qs 34/12, http://bit.ly/15RxTaL.

118 Dokumentations- und Informationssystem für Parlamentarische Vorgänge, "Gesetz zur Änderung des Telekommunikationsgesetzes und zur Neuregelung der Bestandsdatenauskunft" [Act to amend the Telecommunications Act and the revision of the existing stored data inquiry], ID: 17-48610, http://dipbt.bundestag.de/extrakt/ba/WP17/486/48610.html..

119 Bundesverfassungsgericht [Federal Constitutional Court], judgment of January 24, 2012, 1 BvR 1299/05, Absatz-Nr. (1-192), http://www.bverfg.de/entscheidungen/rs20120124_1bvr129905.html.

120 BVerfG, judgment of March 2, 2010, 1 BvR 256/08, Absatz-Nr. (1-345), http://www.bverfg.de/entscheidungen/rs20100302_1bvr025608.html.

121 Nikolas Busse, "Jeden Tag 315.036,54 Euro Strafe" [For each day a fine of Euro 315,036.54], FAZ.net, May 31, 2012, http://www.faz.net/-gpg-709kp.

122 European Commission, "Data retention: Commission takes Germany to Court requesting that fines be imposed", Press release IP/12/530, May 31, 2012, http://europa.eu/rapid/press-release_IP-12-530_en.htm.

123 Speicherdauer" [duration of storage], http://wiki.vorratsdatenspeicherung.de/images/BNetzA_Speicherdauer.pdf.

124 Google, "Google Transparency Report. User Data Requests. Germany. July to December 2012", 2013, http://www.google.com/transparencyreport/userdatarequests/DE/?hl=en_US.

125 Microsoft, "2012 Law Enforcement Requests Report", http://www.microsoft.com/about/corporatecitizenship/en-us/reporting/transparency/.

126 "German firms see rising Chinese cyberattacks," February 24, 2013, http://www.thelocal.de/sci-tech/20130224-48165.html. Cf. also Federal Ministry of the Interior, "Cyber Security Strategy for Germany," Edition February 2011, p.8, http://www.cio.bund.de/SharedDocs/Publikationen/DE/Strategische-Themen/css_engl_download.pdf?__blob=publicationFile.

127 Federal Ministry of the Interior, "Bundesinnenminister Dr. Hans-Peter Friedrich eröffnet das Nationale Cyber-Abwehrzentrum" [Germany's Interior Minister Hans-Peter Friedrich introduced the new national National Cyber Response Centre], Press Release, June 16, 2013. Cf. also Federal Ministry of the Interior, "Cyber Security Strategy for Germany", Edition February 2011, p.9, http://www.cio.bund.de/SharedDocs/Publikationen/DE/Strategische-Themen/css_engl_download.pdf?__blob=publicationFile.

128 Christian Tretbar, "Friedrich: Speichern von Daten dient einem 'edlen Zweck'" , July 14, 2013, http://bit.ly/143AqhH.

129 Cf. Federal Ministry of the Interior, "Entwurf eines Gesetzes zur Erhöhung der Sicherheit informationstechnischer Systeme" [Draft legislative proposal for improving the security of information networks], March 5, 2013, http://bit.ly/XsVWs1.

130 Cf. Andre Meister, " IT-Sicherheitsgesetz vor dem Aus: Wirtschaft verhindert Meldepflicht über Sicherheitsvorfälle" [Cyber security law on the brink: Industry blocks reporting obligation for security breaches], June 5, 2013, https://netzpolitik.org/2013/it-sicherheitsgesetz-vor-dem-aus-wirtschaft-verhindert-meldepflicht-uber-sicherheitsvorfalle/.

131 The Economic Times, "Germany prepares special unit to tackle cyberattack," June 6, 2012, http://articles.economictimes.indiatimes.com/2012-06-06/news/32079025_1_cyber-warfare-cyber-attack-special-cyber. Cf. also Kuhn Johannes, "Deutschlands Hackertruppe übt noch" [Germany's hacking unit still practices], June 5, 2012, http://www.sueddeutsche.de/digital/bundeswehr-im-cyberwar-deutschlands-hackertruppe-uebt-noch-1.1374819.