Austria

Austrian Post

9,500,000 €

GDPR enforcement action by Austrian Data Protection Authority (dsb) on 2021-09-28.

Rank · Sector

of 168 in Transportation and Energy

Rank · Austria

of 38

Rank · All fines

#48

of 3,051

Case details

Authority: Austrian Data Protection Authority (dsb)
Date: 2021-09-28
Controller / Processor: Austrian Post
Sector: Transportation and Energy
Quoted Articles: Art. 12 (2) GDPR
Type of violation: Insufficient fulfilment of data subjects rights

Summary

The Austrian DPA imposed a fine of EUR 9.5 million on the Austrian Post on September 28, 2021. The main accusation is that, in addition to the contact options used by Austrian Post via mail, web contact form and customer service, data protection-related inquiries should also be allowed via e-mail. According to the newspaper "Der Standard", the Austrian Post had only introduced a contact form for data protection inquiries, in order to automate the process of inquiries and to obtain all information necessary for processing the inquiries.

Open original source Links to the regulator's original publication or another source.