Search Privacy Fines

Browse and filter privacy enforcement fines worldwide.

← Back to Overview

Regulation

Country

Year

Min Fine (USD)

Sort

23 fines found

Total: $40.7M

Date	Company	Fine	Regulation	Authority	Country	Type	Summary
2019-10-23	Austrian Post	€18.0M	GDPR	Austrian Data Protection Authority (DSB)	Austria	Non-compliance with lawful basis for data processing	The Austrian Post had sold detailed personal profiles of approximately three mil... The Austrian Post had sold detailed personal profiles of approximately three million Austrians to various companies and political parties. The profiles contained names, addresses, political predilections, and even intimate details. Articles: Art. 5 (1) a) GDPR, Art. 6 GDPR
2021-09-28	Austrian Post	€9.5M	GDPR	Austrian Data Protection Authority (DSB)	Austria	Failure to implement sufficient measures to ensure information security	-- Articles: Art. 32 GDPR
2022-01-14	REWE International AG	€8.0M	GDPR	Austrian Data Protection Authority (DSB)	Austria	Various offences	-- Articles: Art. 5 (1) c) GDPR, others
2021-08-02	Unser O-Bonus Club GmbH	€2.0M	GDPR	Austrian Data Protection Authority (DSB)	Austria	Failure to comply with data processing principles	-- Articles: Art. 6 GDPR, Art. 7 GDPR, Art. 12 GDPR
2019-08-30	Medical Company	€50K	GDPR	Austrian Data Protection Authority (DSB)	Austria	Information obligation non-compliance	The company was fined because it had refused to comply with the obligation of ap... The company was fined because it had refused to comply with the obligation of appointing a data protection officer. Articles: Art. 13 GDPR, Art. 37 GDPR
2019-08-30	Medical Company	€50K	GDPR	Austrian Data Protection Authority (DSB)	Austria	Information obligation non-compliance	-- Articles: Art. 13 GDPR, Art. 37 GDPR
2022-08-23	Operator of a public toilet	€25K	GDPR	Austrian Data Protection Authority (DSB)	Austria	Failure to comply with data processing principles	-- Articles: Art. 5 (1) a), b), c) GDPR, Art. 6 (1) f) GDPR, Art. 13 GDPR
2019-07-31	Private individual (football coach)	€11K	GDPR	Austrian Data Protection Authority (DSB)	Austria	Non-compliance with lawful basis for data processing	-- Articles: Art. 6 GDPR
2019-07-31	Private individual (football coach)	€11K	GDPR	Austrian Data Protection Authority (DSB)	Austria	Non-compliance with lawful basis for data processing	A soccer coach was fined for having covertly filmed female players while they we... A soccer coach was fined for having covertly filmed female players while they were taking showers. This had taken place for many years. Articles: Art. 6 GDPR
2018-12-12	Bookmaker	€5K	GDPR	Austrian Data Protection Authority (DSB)	Austria	Information obligation non-compliance	The betting place used a system of video surveillance illegally because it filme... The betting place used a system of video surveillance illegally because it filmed the public space (the sidewalk). Private individuals are not allowed to do this on a large scale like in this case. Articles: Art. 13 GDPR
2018-12-12	Bookmaker	€5K	GDPR	Austrian Data Protection Authority (DSB)	Austria	Information obligation non-compliance	-- Articles: Art. 13 GDPR
2018-12-20	Private individual	€2K	GDPR	Austrian Data Protection Authority (DSB)	Austria	Non-compliance with lawful basis for data processing	-- Articles: Art. 5 (1) a) GDPR, Art. 5 (1) c) GDPR, Art. 6 (1) GDPR, Art. 13 GDPR
2018-12-20	Private individual	€2K	GDPR	Austrian Data Protection Authority (DSB)	Austria	Non-compliance with lawful basis for data processing	A person was fined for having unlawfully filmed public areas using a private CCT... A person was fined for having unlawfully filmed public areas using a private CCTV system. The system filmed parking lots, sidewalks, a garden area of a nearby property, and it also filmed the neighbors going in and out of their homes. The video surveillance was found to be unreasonable given the initial purpose of the CCTV system itself. Because it filmed private areas of life without the express consent of the people involved, the subject was fined. Articles: Art. 5 (1) a) GDPR, Art. 5 (1) c) GDPR, Art. 6 (1) GDPR, Art. 13 GDPR
2018-11-01	Restaurant	€2K	GDPR	Austrian Data Protection Authority (DSB)	Austria	Unknown	CCTV footage was not properly used. CCTV footage was not properly used. Articles: Unknown
2018-11-01	Restaurant	€2K	GDPR	Austrian Data Protection Authority (DSB)	Austria	Unknown	-- Articles: Unknown
2020-10-19	Private individual	€600	GDPR	Austrian Data Protection Authority (DSB)	Austria	Failure to comply with data processing principles	-- Articles: Art. 5 (1) 1) GDPR, Art. 9 GDPR
2018-09-27	Private individual	€300	GDPR	Austrian Data Protection Authority (DSB)	Austria	Non-compliance with lawful basis for data processing	The car owner used the dash-cam unlawfully. The car owner used the dash-cam unlawfully. Articles: Art. 5 (1) a) GDPR, Art. 6 GDPR
2018-09-27	Private individual	€300	GDPR	Austrian Data Protection Authority (DSB)	Austria	Non-compliance with lawful basis for data processing	-- Articles: Art. 5 (1) a) GDPR, Art. 6 GDPR
2020-10-19	Private individual	€150	GDPR	Austrian Data Protection Authority (DSB)	Austria	Failure to comply with data processing principles	-- Articles: Art. 5(1) a) GDPR, Art. 6 GDPR
2020-08-05	Bank	€100	GDPR	Austrian Data Protection Authority (DSB)	Austria	Non-compliance with lawful basis for data processing	-- Articles: Art. 5 GDPR, Art. 6 GDPR
2021-01-01	Private individual	€0	GDPR	Austrian Data Protection Authority (DSB)	Austria	Failure to comply with data processing principles	-- Articles: Art. 5 (1) a) GDPR, Art. 9 (1), (2) GDPR
2021-01-01	Private individual	€0	GDPR	Austrian Data Protection Authority (DSB)	Austria	Failure to comply with data processing principles	-- Articles: Art. 5 (1) a), c) GDPR
2019-10-23	Austrian Post	€0	GDPR	Austrian Data Protection Authority (DSB)	Austria	Non-compliance with lawful basis for data processing	-- Articles: Art. 5 (1) a) GDPR, Art. 6 GDPR