DPA case DSB-D124.1177/0006-DSB/2019 – Dismissed (Austria, 2021)

Dismissed
Datenschutzbehörde22 January 2021Austria
final
Dismissed

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

An Austrian data protection authority dismissed a complaint about a company's archive of media articles related to fascism and right-wing extremism. The complainant wanted the articles removed, claiming there was no legal basis for processing their personal data. The decision matters because it shows that archives can be preserved for research purposes under certain conditions.

What happened

A complaint was dismissed regarding the processing of personal data in a media archive.

Who was affected

The complainant, who was labeled as 'extreme right-wing' in the archive, was affected.

What the authority found

The authority found that the company had a valid legal basis for maintaining the archive for scientific research.

Why this matters

This case highlights that companies can retain sensitive data for research if they meet specific legal requirements. It emphasizes the importance of understanding how data can be used for historical documentation.

GDPR Articles Cited
Automatically processed
Art. 5(1)(b) GDPR
Art. 5(1)(e) GDPR
Art. 9(1) GDPR
Art. 9(2)(j) GDPR
Art. 17(1)(c) GDPR
Art. 17(1)(d) GDPR
Art. 21(6) GDPR
Art. 89(1) GDPR
Art. 89(3) GDPR
View original scraped data
Art. 5(1)(e) GDPR
Art. 5(1)(b) GDPR
Art. 9(1) GDPR
Art. 9(2)(j) GDPR
Art. 17(1)(d) GDPR
Art. 17(1)(c) GDPR
Art. 17(3)(d) GDPR
Art. 21(6) GDPR
Art. 89(1) GDPR
Art. 89(3) GDPR

Original imported citations before automated processing; the processing history does not establish independent verification.

National Law Articles
AI-identified
§ 2d(6) Austrian Research Organization Act (FOG)
§ 2f(1)(6)(a) FOG

Source checks

Secondary-source text retrieved.

Automated check recorded — 18 October 2026.

Processing notes: articles corrected, national law identified.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

The controller pursues, among other things, the purpose of scientific research on the history of fascism and National Socialism, the resistance to the latter movements and on political manifestations of right-wing extremism, including the purpose of documentation and archiving. The controller operates different types of archives. Relevant here is the so-called "cut archive", in which clippings from various media, in particular daily newspapers, are stored. These articles are stored and key-worded online. The respondent made media contributions by the complainant accessible on its website and labelled the complainant as "extreme right-wing". An employee of the controller had also made corresponding statements to the media. The complainant requested the controller to delete the aforementioned articles. This was based on the claim that the controller cannot rely on a legal basis under the GDPR to process such special categories of personal data. Also, it was stated that the controller does not use such data for scientific purposes, as claimed, but for daily political purposes. The respondent rejected the request. It stated that the processing served purposes pursuant to Article 89(1) GDPR and was exempted from the right to deletion by § 2d (6) of the Austrian Research Organization Act (FOG). Further, the controller referred to Article 9 (1) and (2) (e) GDPR. The political conviction of the complainant was not a secret and was based on verifiable statements made publicly by the complainant. The complainant filed a complaint with the Austrian DPA (Datenschutzbehörde - DSB). = With § 2d(6)(3) FOG, there is a national provision that excludes the right to erasure insofar as this is likely to render impossible or seriously impair the achievement of purposes pursuant to Article 89(1) GDPR. In principle, Article 89(3) GDPR contains an opening clause. This provision was also applied in the present case. The DSB decided that the maintenance of the "cut archive" falls under

Outcome

Dismissed

The complaint or investigation was dismissed.

Related Enforcement Actions (0)

No other enforcement actions found for DPA case DSB-D124.1177/0006-DSB/2019 in AT

This is the only recorded action for this entity in this jurisdiction.

Details

Decision Date

22 January 2021

Authority

Datenschutzbehörde

GDPRhub ID

gdprhub-3551

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. DPA case DSB-D124.1177/0006-DSB/2019 - Austria (2021). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: