pharmacy customer (data subject) – Court Ruling (Austria, 2026)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
A court ruled on a case where a pharmacy reported a customer for fraud after they didn't pay for items. The court found that the pharmacy violated the customer's right to confidentiality by sharing their information with the police. This is important because it highlights the need for businesses to protect customer information.
What happened
The pharmacy disclosed a customer's enforcement proceedings to the police after a payment issue.
Who was affected
The customer who ordered items from the pharmacy but did not pay.
What the authority found
The court decided that the pharmacy breached the customer's confidentiality rights by sharing their information improperly.
Why this matters
This case underscores the importance of protecting customer data and confidentiality. Businesses should be careful about how they handle sensitive information to avoid legal issues.
GDPR Articles Cited
View original scraped data
Original data from scraper before AI verification against source document.
National Law Articles
The data subject did not pay for items ordered and collected from the controller. After several reminders, the controller commissioned a debt collection agency, which pointed to several enforcement proceedings against the data subject. The controller then reported the data subject for fraud and provided the police with a record of the enforcement proceedings. On 27. January 2025, the data subject lodged a complaint with the Austrian DPA (DSB) regarding the violation of their right to confidentiality, as the disclosure of the record constitutes a violation of [https://www.ris.bka.gv.at/eli/rgbl/1896/79/P427/NOR40233943?Abfrage=Bundesnormen&Kundmachungsorgan=&Index=&Titel=EO&Gesetzesnummer=&VonArtikel=&BisArtikel=&VonParagraf=427&BisParagraf=&VonAnlage=&BisAnlage=&Typ=&Kundmachungsnummer=&Unterzeichnungsdatum=&FassungVom=03.08.2026&VonInkrafttretedatum=&BisInkrafttretedatum=&VonAusserkrafttretedatum=&BisAusserkrafttretedatum=&NormabschnittnummerKombination=Und&ImRisSeitVonDatum=&ImRisSeitBisDatum=&ImRisSeit=Undefined&ResultPageSize=100&Suchworte=&Position=1&SkipToDocumentPage=true&ResultFunctionToken=c7a56c5c-2040-47e7-91fe-3ae37e4eb965 § 427 EO] in conjunction with [https://www.ris.bka.gv.at/eli/bgbl/i/1999/165/A1P1/NOR40139563?Abfrage=Bundesnormen&Kundmachungsorgan=&Index=&Titel=DSG&Gesetzesnummer=&VonArtikel=&BisArtikel=&VonParagraf=1&BisParagraf=&VonAnlage=&BisAnlage=&Typ=&Kundmachungsnummer=&Unterzeichnungsdatum=&FassungVom=03.08.2026&VonInkrafttretedatum=&BisInkrafttretedatum=&VonAusserkrafttretedatum=&BisAusserkrafttretedatum=&NormabschnittnummerKombination=Und&ImRisSeitVonDatum=&ImRisSeitBisDatum=&ImRisSeit=Undefined&ResultPageSize=100&Suchworte=&Position=1&SkipToDocumentPage=true&ResultFunctionToken=607193ce-5b62-4d7a-abab-5027790e9ed4 § 1 DSG]. The controller could have chosen a more restrained approach, such as a motion for evidence. During the proceedings, the controller stated that the purpose of the provided record was to substantiate the suspicion of
Outcome
Court Ruling
A ruling by a national court on a data-protection matter.
Related Cases (0)
No other cases found for pharmacy customer (data subject) in AT
This is the only recorded case for this entity in this jurisdiction.
Details
About this data
Cite as: Cookie Fines. pharmacy customer (data subject) - Austria (2026). Retrieved from cookiefines.eu
Last updated: