Austrian Post
€16,000,000
Insufficient legal basis for data processing
Decision Date
29 de outubro de 2019
Authority
Austrian Data Protection Authority (dsb)
AT
Sector
Transportation and Energy
Country
AT
Law
GDPRStatus
FINALDescription
The Austrian DPA has imposed a fine of EUR 16,000,000 on the Austrian Post. The controller had sold information regarding the political affinity to third parties without a sufficient legal basis. Update: After the Austrian Federal Administrative Court canceld the fine with ruling from 2020-11-26, it again decided in the case and upheld the fine regarding the legal issue, but reduced the total amount from EUR 18,000,000 to EUR 16,000,000.
Legal Citations
Art. 5 (1)Art. 6
Issues & Violations
Insufficient legal basis for data processing