Court case W292 2342582-1/13E – Court Ruling (Austria, 2026)

Court Ruling
DPA BVwG7 January 2026Austria
final
Court Ruling

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

An association helped a person file a complaint about a telecommunication provider charging unexpected fees. The court found that the person already had access to their invoices online and didn't need the association's help. This case highlights the importance of understanding your rights and how to access your own data without relying on third parties.

What happened

A person hired an association to file a complaint about unexpected service fees from their telecommunication provider.

Who was affected

The person who was charged unexpected fees by their telecommunication provider and the association that filed the complaint on their behalf.

What the authority found

The court ruled that the person did not need the association's help to access their invoices, as they could already view them online.

Why this matters

This ruling emphasizes that individuals should know how to access their own data directly. It also warns against relying on third parties for data access when it's unnecessary.

GDPR Articles Cited
Automatically processed
View original scraped data
Art. 57(4) GDPR

Original imported citations before automated processing; the processing history does not establish independent verification.

Decision AuthorityBVwG

Source checks

Secondary-source text retrieved.

Automated check recorded — 29 August 2026.

No issues were reported by that automated check.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

A data subject hired an association whose business model is to automatically search for possible data protection violations and filing complaints or lawsuits on behalf of data subjects with the financial aid of litigation funders. The agreement between the data subject and the association foresees that the data subject receives 70% of possible profits coming from a favourable judicial or administrative decision and 30% of the profits go to the litigation funders. In the agreement, the association claims their offer would generate profit without any risk for their customers. The association made an access request and filed a complaint via a lawyer on behalf of the data subject. The telecommunication provider charged the data subject with a service fee the parties have not agreed upon. The access request concerned invoices of a telecommunication provider that the data subject was in a contractual relationship with and the service fee was indicated on the invoices. On the initiative of the association, not the data subject, the association made an access request, claiming the service fee let the data subject to believe that the telecommunication provider might possess documents concerning the data subject without their knowledge and might process their personal data unlawfully. The data subject already had access to the invoices through the telecommunication provider’s online portal for customers. The data subject did not, or did not remember, to explicitly mandate the association to lodge the access request. The lawyer hired by the association filed a complaint on behalf of the data subject because of a possible violation of Article 15 GDPR. The grounds of the violation were illustrated only rudimentary in the complaint. The association filed a total of more than 900 complaints with the DPA that follow the same pattern, with 142 of those complaints being filed against the telecommunication provider because of GDPR violations in the context of charging a servic

Outcome

Court Ruling

A ruling by a national court on a data-protection matter.

Related Cases (0)

No other cases found for Court case W292 2342582-1/13E in AT

This is the only recorded case for this entity in this jurisdiction.

Details

Ruling Date

7 January 2026

Authority

DPA BVwG

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. Court case W292 2342582-1/13E - Austria (2026). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: