Court case W605 2289290-2/18E – Court Ruling (Austria, 2026)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
A court ruled on a case where a person requested access to their personal data from a public authority. This is important because it shows the rights individuals have to know how their data is used. Companies should be prepared to provide clear information when asked about personal data.
What happened
The court addressed a complaint about incomplete access to personal data requested by a person receiving social benefits.
Who was affected
The individual receiving social benefits from a public authority was affected.
What the authority found
The court found that the public authority had provided some access to the personal data but did not fully meet the individual's request.
Why this matters
This case emphasizes the importance of transparency in data handling. Organizations must be ready to respond to access requests comprehensively.
GDPR Articles Cited
View original scraped data
Original data from scraper before AI verification against source document.
The data subject received social benefits from a public authority (controller) because of their unemployment. The controller has established an investigation unit that investigates undeclared workers and people who refuse to work but receive benefits. Employees from that investigation unit visited the data subject’s address and took pictures in the context of an investigation into possible income from self-employed work. The data subject requested from the controller access to their personal data processed by the controller pursuant to Article 15 GDPR. The controller submitted the data to the data subject. In an additional access request, the data subject requested information as to the number of photos taken at the address of the data subject, what objects were depicted, which employees took those pictures and with what justification. As a response, the controller sent six pictures that were taken at the address of the data subject in PDF format to the data subject. Three pictures were taken from the public pavement and depicted a poster and an advertisement placard, both visible from the public pavement. Three other pictures depicted the data subject’s car and house. The data subject lodged a complaint with the DPA, claiming incomplete access to their personal data, especially because the controller failed to provide them with information concerning the employers who conducted the investigation against them and meta data of the pictures, including technical data of the pictures. The DPA rejected the complaint and the data subject appealed it to the Federal Administrative Court (BVwG). As far as the scope of the access request was concerned, the Court held that the data subject has narrowed the scope of the subject matter of the access request to the pictures and the justification to take them by specifying those matters in their request. Since the access request is triggered by the request of the data subject, the request can limit the scope of what the DPA ha
Outcome
Court Ruling
A ruling by a national court on a data-protection matter.
Related Cases (0)
No other cases found for Court case W605 2289290-2/18E in AT
This is the only recorded case for this entity in this jurisdiction.
Details
About this data
Cite as: Cookie Fines. Court case W605 2289290-2/18E - Austria (2026). Retrieved from cookiefines.eu
Last updated: