Austrian Post

€18.0M($19.4M USD)final

Date Issued

2019-10-23

Regulation

Authority

Austrian Data Protection Authority (DSB)

Country

Austria

Violation Type

Non-compliance with lawful basis for data processing

Currency

EUR

Violation Summary

The Austrian Post had sold detailed personal profiles of approximately three million Austrians to various companies and political parties. The profiles contained names, addresses, political predilections, and even intimate details.

Articles Violated

Art. 5 (1) a) GDPRArt. 6 GDPR

Other Fines for Austrian Post

DateRegulationAmount (USD)Type
2021-09-28GDPR$10,260,000Failure to implement sufficient measures to ensure information security
2019-10-23GDPR--Non-compliance with lawful basis for data processing