1. Introduction

The right to informational self-determination holds a central position in Germany's data protection framework. Proposed by Steinmüller and Lutterbeck in 1971 and solidified by the Federal Constitutional Court's 1983 "Census Decision," this right safeguards individuals against state intrusion in determining the use of their personal information. With advancements in information technology and artificial intelligence, the right to informational self-determination faces new challenges, particularly in data collection and automated processing. The German Federal Constitutional Court has set limits on state violations of this right through various cases, incorporating digital characteristics and applying the principle of proportionality to refine constitutional standards. This article analyzes the challenges posed by technological developments to informational self-determination, examining the Court's jurisprudential approach and the application of proportionality in reviewing infringements.

2. Conceptual Origins and Nature of the Right to Informational Self-Determination

This section explores the conceptual origins and legal nature of the right to informational self-determination. The 1969 and 1983 census cases formed the backdrop for its establishment. In the 1969 "Microcensus Case," a resident was fined for refusing to answer privacy-related questions, prompting a constitutional review by the Federal Constitutional Court, which ruled that inquiries about vacation and therapeutic travel did not violate the Basic Law. In the 1983 "Census Case," over 100 citizens argued that the Federal Census Act infringed upon their general personality rights, leading to a constitutional complaint. The Court derived the right to informational self-determination from the Basic Law, defining it as the individual's fundamental authority to decide on the disclosure and use of their personal data. As a defensive right rooted in general personality rights and human dignity, it developed five guiding principles. These rulings expanded informational self-determination from privacy protection in intimate spheres to encompass all data processing tied to identifiability, shifting its focus from "privacy defense" to "data control."

3. Defining the Boundaries of Informational Self-Determination

This section discusses the boundaries of informational self-determination in the context of internet technology. Through the "Systematic Screening Case" and the "Online Search Case," the Federal Constitutional Court refined its scope. In the former, the Court ruled that preventive systematic screening measures only avoid violating informational self-determination if a concrete danger exists, with general threats insufficient as justification. In the latter, the Court derived a new fundamental right—"the guarantee of IT system confidentiality and integrity"—from the Basic Law, supplementing protections in the digital age. While informational self-determination focuses on the constitutionality of personal data processing, the new right safeguards the confidentiality and functional integrity of IT systems themselves.

4. Challenges and Conceptual Expansion in the Digital Age

This section examines the challenges and evolving interpretation of informational self-determination in the digital era. As a defensive right against state overreach, it significantly influences the EU's data control framework, which imposes strict legislative limits on data activities with extraterritorial effects. However, a gap exists between legislative intent and practical enforcement, as user "consent" to data sharing often becomes perfunctory, undermining the right's realization. Technological advancements have exposed the concept's limitations, originally framed within a simplistic control paradigm centered on abstract decision-making. Rooted in traditional doctrinal models that prioritize shielding individuals from state interference, equating informational self-determination with personal conduct or property overlooks the dynamic, context-dependent nature of data processing.

Since the 1983 "Census Case," German legal scholarship has reinterpreted the right to include a "communicative dimension." It is no longer merely a right to withdraw from societal participation or passively accept conditions but a fundamental right to communication. This shift reflects the interplay between EU and national law. As an EU member, Germany must integrate the GDPR into domestic law, potentially blending EU and German legal concepts. Scholars are actively reimagining informational self-determination for complex data application scenarios, advocating a balance between individual responsibility and collective democratic mechanisms. Absolute informational self-determination is unattainable; it must be understood as a relative, relational process. Proposed adaptations include a two-tiered conceptual framework: the first tier emphasizes defensive rights, while the second adopts a context-sensitive approach to accommodate diverse freedoms.

5. New Threats and Protective Measures in the AI Era

The AI era presents novel challenges to informational self-determination, particularly through automated data analysis, which enhances state processing capabilities. In the "Automated Data Analysis Case," IT tools were introduced to policing, improving efficiency but risking significant rights violations. AI systems, depending on their design, may infringe on fundamental rights, with opaque mechanisms and outcomes eroding state control over autonomous systems. The Federal Constitutional Court redefined the protective boundaries of informational self-determination in this case, mandating strict adherence to proportionality and multi-criteria justification reviews for automated data analysis. While upholding proportionality, the Court adapted its application to automated processes, demonstrating responsiveness to digital-era conflicts and technological uncertainties within constitutional logic.

6. Conclusion

Since establishing the right to informational self-determination in 1983, the German Federal Constitutional Court has continuously refined it through jurisprudence. In digital-era cases, the Court has clarified its boundaries and expanded systemic personality protections under the framework of IT system confidentiality and integrity. The right is evolving from a defensive to a communicative right, emphasizing individuals' active role and agency in information flows. This transformation reflects the dynamic interaction between German constitutional jurisprudence and EU law.