Enforcement
EN Austrian Post: Insufficient legal basis for data processing
€16,000,000 fine - Austrian Data Protection Authority (dsb)
Content
The Austrian DPA has imposed a fine of EUR 16,000,000 on the Austrian Post. The controller had sold information regarding the political affinity to third parties without a sufficient legal basis. Update: After the Austrian Federal Administrative Court canceld the fine with ruling from 2020-11-26, it again decided in the case and upheld the fine regarding the legal issue, but reduced the total amount from EUR 18,000,000 to EUR 16,000,000.
GDPR Articles: Art. 5 (1) a) GDPR, Art. 6 GDPR
Industry: Transportation and Energy