DPA case DSB-D550.1284 (telecom employee) – €700 Fine (Austria, 2026)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
A telecommunications employee was fined EUR 700 for disclosing a customer's telephone number to her ex-partner without permission. The employee bypassed security measures and acted outside company guidelines. This case underscores the importance of following data protection rules to prevent unauthorized access to personal information.
What happened
A telecommunications employee disclosed a customer's new telephone number to her former partner without authorization.
Who was affected
A customer whose personal information was improperly shared by a telecommunications employee.
What the authority found
The Austrian DPA ruled that the employee violated GDPR by disclosing personal data without a legitimate interest.
Why this matters
This case serves as a reminder for employees to adhere to data protection policies. Companies should train staff on the importance of safeguarding customer information.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Secondary-source text retrieved.
Review needed — 18 October 2026.
Processing notes: amount discrepancy.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Austrian DSB’s decision of 27 January 2026, 2026-0.074.279 (DSB-D550.1284), fined a telecommunications employee EUR 1,000 for independently disclosing a customer’s new telephone number to her former partner. The employee bypassed the customer-password safeguard using a master switch, acted outside the employer’s instructions and was therefore a controller for this processing. Benevolence and a third party’s harassment did not provide a legitimate interest. The authoritative RIS annotation records an appeal of 2 February 2026 followed by the DSB’s own administrative preliminary appeal decision of 20 February 2026, 2026-0.153.565, reducing the fine to EUR 700 and correcting the employee’s gender to male. That reduced decision became legally final. The EUR 70 procedural contribution is not part of the fine; no separate BVwG merits judgment is established.
Related Enforcement Actions (0)
No other enforcement actions found for DPA case DSB-D550.1284 (telecom employee) in AT
This is the only recorded action for this entity in this jurisdiction.
Details
About this data
Cite as: Cookie Fines. DPA case DSB-D550.1284 (telecom employee) - Austria (2026). Retrieved from cookiefines.eu
Last updated: