I. What “Sensor Data Integrity” Means in German Smart Cities

In Germany, sensor data integrity refers to:

1. Technical Integrity

• Protection against hacking, spoofing, and tampering of IoT sensors (traffic cameras, pollution sensors, smart meters)
• Ensuring correct transmission from device → cloud → authority

2. Legal Integrity

• Data must be collected lawfully under proportionality principle
• Must respect informational self-determination (BVerfG doctrine)

3. Evidentiary Integrity

• Sensor data used in criminal or administrative proceedings must be:
  • authentic
  • traceable
  • verifiable
  • free from manipulation

II. Key Legal Framework in Germany

Smart city sensor systems are regulated indirectly through:

• GDPR (General Data Protection Regulation) – strict rules on personal data processing
• BDSG (Federal Data Protection Act) – national implementation
• StPO (Code of Criminal Procedure) – evidence handling
• Telecommunications and Digital Services Law (TKG / TTDSG) – communication data rules
• Constitutional rights under Grundgesetz
  • Article 1 (Human dignity)
  • Article 2 (General personality rights)
  • Article 10 (Telecommunications privacy)

III. Core Legal Problem: “Trust in Sensor Data”

German courts repeatedly face 3 recurring issues:

1. Can sensor data be trusted?

→ risk of hacking or manipulation

2. Was it collected legally?

→ surveillance limits under proportionality

3. Can it be used in court?

→ exclusion or balancing doctrine

IV. Case Laws on Sensor Data Integrity (Germany)

Below are important German and EU-influenced decisions shaping smart city sensor data reliability and admissibility.

1. BVerfG Census Decision (Right to Informational Self-Determination)

Court

Federal Constitutional Court (Bundesverfassungsgericht)

Year

1983

Principle

This foundational judgment created the “right to informational self-determination.”

Holding

• Citizens control the disclosure and use of their personal data
• State data collection must be strictly necessary and proportionate

Relevance to Smart Cities

Smart city sensors (traffic cameras, facial recognition, mobility tracking):

• must not collect excessive identifiable data
• must justify necessity

👉 This case is the constitutional backbone of all sensor integrity law in Germany

2. BGH GPS Vehicle Tracking Case (Logistics Surveillance)

Court

Federal Court of Justice (BGH)

Year

2001

Principle

GPS tracking of individuals or vehicles is a serious interference with privacy

Holding

• GPS monitoring is only lawful if:
  • strictly necessary for investigation
  • proportionate to crime severity
• excessive tracking violates constitutional rights

Relevance

Smart city fleets (public transport tracking, waste management sensors):

• continuous location data collection must be limited
• long-term storage is highly sensitive

3. VG Wiesbaden – GPS Data Processing Restrictions

Court

Administrative Court of Wiesbaden

Year

2022

Issue

Legality of systematic GPS tracking and processing of movement data

Holding

• Strict GDPR interpretation applies to continuous location data
• Employers/public authorities must justify necessity
• Broad tracking is unlawful without legal basis

Relevance

Smart city mobility sensors:

• cannot store unrestricted citizen movement data
• require legal basis + purpose limitation

4. BVerfG Telecommunications Data Retention Decision

Court

Federal Constitutional Court

Year

2020

Holding

• Broad retention of communication and metadata is unconstitutional
• Even “preventive” mass data storage violates privacy rights

Relevance to Sensor Networks

Smart city infrastructures often store:

• location logs
• device identifiers
• behavioral movement data

👉 This case limits bulk sensor data retention without cause

(See constitutional reasoning on inventory and metadata protection)

5. CJEU “SpaceNet & Telekom Deutschland” Data Retention Case

Court

Court of Justice of the European Union

Year

2022

Holding

• Germany’s general data retention rules violate EU law
• indiscriminate retention of communication data is illegal

Relevance

Smart city IoT systems often mimic telecom data retention by:

• storing all sensor logs “just in case”

👉 This ruling restricts mass retention of sensor-generated metadata

6. BAG Keylogger Surveillance Case (Employee Monitoring Sensors)

Court

Federal Labour Court (Bundesarbeitsgericht)

Issue

Use of continuous electronic monitoring (keyloggers)

Holding

• continuous surveillance violates data protection law
• evidence obtained unlawfully cannot be used in dismissal proceedings

Relevance to Smart Cities

Applies to:

• workplace smart sensors
• municipal employee tracking systems
• infrastructure monitoring tools

👉 Sensor data obtained through excessive monitoring may be inadmissible in court

7. BGH EncroChat Data Decision (Digital Evidence Integrity)

Court

Federal Court of Justice

Issue

Use of hacked encrypted communication data

Holding

• foreign-obtained digital evidence can be admissible
• but must be evaluated carefully under §261 StPO (free judicial assessment)

Relevance

Smart city sensor data sourced from:

• cross-border systems
• cloud platforms
• third-party IoT providers

👉 Even compromised datasets may still be used if reliability is proven

V. Major Legal Principles Derived from Case Law

From all cases, German courts apply 5 major principles:

1. Proportionality Principle

No mass surveillance via sensors without justification

2. Data Minimization

Collect only what is necessary (GDPR core rule)

3. Integrity Requirement

Sensor data must be:

• traceable
• unaltered
• verifiable

4. Judicial Balancing Doctrine

Illegally obtained data is not automatically excluded

5. Constitutional Primacy

Basic Law overrides technological convenience

VI. Smart City Risks Identified by German Courts

1. Sensor Manipulation

• hacking traffic systems
• spoofing environmental data

2. Over-collection of Data

• unnecessary facial recognition
• mass location tracking

3. Data Fusion Risks

Combining multiple sensor streams creates:

• profiling risks
• re-identification risks

4. Private Operator Control

Many smart city sensors are run by private firms → weaker transparency

VII. Legal Safeguards in Germany

Germany mitigates these risks through:

• strict GDPR enforcement
• independent data protection authorities
• constitutional complaint system
• requirement of legal basis for surveillance
• strong judicial review of evidence

VIII. Conclusion

Smart city sensor data integrity in Germany is governed not by a single law, but by a constitutional + GDPR + criminal procedure framework.

German courts consistently emphasize:

• privacy over surveillance efficiency
• data integrity over technological expansion
• judicial control over automated systems

At the same time, courts avoid rigid exclusion rules and instead rely on balancing and proportionality, meaning even imperfect sensor data can sometimes be used if it remains reliable and essential for justice.