# DSB (Austria) - DSB-D124.5337

- Type: News
- Source: GDPRhub
- Date: 2026-08-23
- Original: https://gdprhub.eu/index.php?title=DSB_(Austria)_-_DSB-D124.5337
- Canonical: https://overview.legal/posts/291429
- Topics: Supervisory Authorities, Personal Data, Controllers

## Summary

The DPA held that the media reporting on a leaked file containing PCR test results of several thousand individuals, and the non-disclosure of the source are protected by the journalistic privilege. English Summary. Facts. In August 2021, an unprotected Excel file containing the names and PCR test results of several thousand individuals was sent from the compromised email account of the first data subject, which was administered by the second data subject. The file was then forwarded by a third p

## Full text

The DPA held that the media reporting on a leaked file containing PCR test results of several thousand individuals, and the non-disclosure of the source are protected by the journalistic privilege. English Summary. Facts. In August 2021, an unprotected Excel file containing the names and PCR test results of several thousand individuals was sent from the compromised email account of the first data subject, which was administered by the second data subject. The file was then forwarded by a third party to the first and second controller, who reported about the case on 01. September 2021 in their online news portals. On 02. September 2021, the second data subject requested the deletion of the news articles. The first controller forwarded this request alongside their response to the second controller. Both controllers rejected the deletion request on grounds of the journalistic exemption (Medienprivileg) under § 9(1) DSG, and also asked further questions about the case. On 09. September 202

---
Generated by overview.legal · https://overview.legal/posts/291429 · 2026-08-24