Private individual: Insufficient legal basis for data processing

The Austrian Data Protection Authority (dsb) fined a private individual €1,200 for processing personal data without a sufficient legal basis under GDPR Articles 5(1)(a), 5(1)(b), 6(1), and 9(2).

StatusNot cited by any decision here yet

€1,200Fine

Private individual

Austria

Art.5GDPR Art.6GDPR Art.9GDPR

Individuals and Private Associations

Personal Data Processing Supervisory Authorities

decidedJun 9, 2026Sourceris.bka.gv.at

We hold a reference to this item, not its text.

enforcementtracker.comRead at the source

Austrian Data Protection Authority (dsb) · Jun 9, 2026

How it connects

References

Art. 5(1)
Art. 6(1)
Art. 9(2)
Art. 5(1)(a)
Art. 5(1)(b)

All 8

Art. 5
Art. 6
Art. 9