News · GDPRhub EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

DSB (Austria) - DSB-D124.1749

Special Categories of Data Types of Special Categories of Personal Data Supervisory Authorities Article 9 Special Categories Processing Conditions Consent Personal Data Controllers
Aug 18, 2026 Source

How it connects

References

Related across sources

Enforcement AEPD investigates University of Navarra over student COVID-19 vaccination status requests AEPD (Spain) Enforcement AEPD: Digi Telecom violated Art 6(1) GDPR by issuing duplicate SIM to impersonator AEPD (Spain) Case Law Audiencia Nacional upholds €2M AEPD fine against Amazon Flex for criminal-record checks National Court Case Law VwGH - VwGH Ro 2025/04/0007-7 Austrian Administrative Supreme Court Case Law Supreme Court upholds €300,000 fine against INPS for GDPR violations in COVID bonus data Supreme Court Enforcement HDPA (Greece) examines deletion request from National Registry of Undesirable Aliens HDPA (Greece)

Full text

The DPA dismissed the data subject's complaint about their social security number shared with a financial service provider to obtain financial aid from the controller as it was only used as an identifier and was therefore not considered sensitive. English Summary. Facts. The controller shared the data subject's social security number with a financial service provider in order to provide financial aid, to which the data subject did not consent. On 17.02.2020, the data subject lodged a complaint with the Austrian DPA (DSB) regarding the unlawful disclosure of their date of birth under Article 9 GDPR, which posed a risk of accessing the data subject's health records using their social security number. On 19.03.2020, the controller stated that the complaint was unfounded, since the data subject had not mentioned anyone taking note of their social security number. Furthermore, financial transactions in contemporary business environments are fully automated, and the field cont

Original document at the source gdprhub.eu

Similar Content